Security Advisory

CVE-2018-14840

6.1
MEDIUM

Vulnerability Description

uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
Published Date August 2, 2018
Official Source NIST NVD Advisory