Security Advisory
CVE-2018-14840
6.1
MEDIUM
Vulnerability Description
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
Published Date
August 2, 2018
Official Source
NIST NVD Advisory