CVE-2017-10795

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

• CWE-79

• http://www.securityfocus.com/bid/99378Third Party Advisory, VDB Entry
• https://github.com/intelliants/subrion/issues/467Exploit, Issue Tracking, Third Party Advisory
• http://www.securityfocus.com/bid/99378Third Party Advisory, VDB Entry
• https://github.com/intelliants/subrion/issues/467Exploit, Issue Tracking, Third Party Advisory

Published

Jul 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1079Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10790The _asn1_check_identifier function in GNU Libtasn1 through …
• CVE-2017-10791There is an Integer overflow in the hash_int function of the…
• CVE-2017-10792There is a NULL Pointer Dereference in the function ll_inser…
• CVE-2017-10793The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, N…
• CVE-2017-10794When GraphicsMagick 1.3.25 processes an RGB TIFF picture (wi…
• CVE-2017-10796On TP-Link NC250 devices with firmware through 1.2.1 build 1…6.5
• CVE-2017-10798In ObjectPlanet Opinio before 7.6.4, there is XSS.
• CVE-2017-10799When GraphicsMagick 1.3.25 processes a DPX image (with metad…
• CVE-2017-1080Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10800When GraphicsMagick 1.3.25 processes a MATLAB image in coder…
• CVE-2017-10801phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the …