Executive brief
Subrion CMS vulnerable to cross-site scripting
Affected products
- Packagist intelliants/subrion
Junglewise Threat Intelligence
CVE-2025-70958: Subrion CMS vulnerable to cross-site scripting
CVE-2025-70958 · Severity: low · CVSS 3.1 · Published 2026-02-03
Technologies: intelliants/subrion (Packagist). Vendors: Packagist.
Related threats
- Intelliants Subrion CMS stored XSS in Blocks Endpoint
- Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool
- Subrion CMS vulnerable to Cross Site Scripting
- Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection
- Subrion remote command execution vulnerability