CVE-2012-4771: Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to i...

Security readout for executives and security teams

CVE-2012-4771 is an XSS issue in Subrion CMS before 2.2.3. An attacker could inject script or HTML through specific admin-area parameters. Business risk depends on whether legacy Subrion is still deployed and whether admin pages are reachable or used by privileged staff. Exposure is likely limited to organizations still running Subrion CMS versions earlier than 2.2.3, especially if administrative interfaces remain reachable. The source bundle does not identify affected CPEs or current product status. Prioritize remediation if Subrion CMS is still in use. This is an old vulnerability, but legacy CMS exposure can create avoidable account, content, and administrative risk if left unpatched. Mitigation focus: Upgrade Subrion CMS to version 2.2.3 or later.; Check Subrion vendor guidance for any additional hardening instructions.; Restrict access to administrative routes where operationally possible..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.