CVE-2018-14835

5.4 mediumEPSS 0.7%

Medium (5.4) in subrion subrion cms. EPSS 0.7% chance of exploitation in the next 30 days.

Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.

Severity

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19