Security Advisory
CVE-2018-14835
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.