← Back to CVE List

CVE-2017-6068

Published: 2017-03-27T02:59Z
Last Modified: 2024-11-21T03:29Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt