Intelliants Subrion CMS Blocks Endpoint cross site scripting_CVE-2026-12202

4.8 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component Blocks Endpoint. Such manipulation of the argument CSS class name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2026-12202

Source VulDB

Published Jun 15, 2026 at 00:45

Affected Product

Vendor Intelliants

Product Subrion CMS

Version 4.0.0

Affected Versions Intelliants Subrion CMS 4.0.0
Intelliants Subrion CMS 4.0.1
Intelliants Subrion CMS 4.0.2
Intelliants Subrion CMS 4.0.3

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component Blocks Endpoint. Such manipulation of the argument CSS class name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2026-06-15T00:45:08.592Z",
    "modified": "2026-06-15T00:45:08.592Z",
    "type": "cve",
    "title": "Intelliants Subrion CMS Blocks Endpoint cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/370845\nhttps://vuldb.com/vuln/370845/cti\nhttps://vuldb.com/cve/CVE-2026-12202\nhttps://vuldb.com/submit/830013\nhttps://hackmd.io/@noka/B1sue5Xkzl",
    "id": "CVE-2026-12202",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "Intelliants Subrion CMS 4.0.0\nIntelliants Subrion CMS 4.0.1\nIntelliants Subrion CMS 4.0.2\nIntelliants Subrion CMS 4.0.3",
    "sourceHref": "",
    "cvss": {
        "score": 4.8,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Subrion CMS",
    "version": "4.0.0",
    "vendor": "Intelliants",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}