[MEDIUM] Subrion CMS vulnerable to cross-site scripting

PKSA-gfy2-s1qm-q2qs CVE-2025-70958 GHSA-9jjm-mc56-3qxv

Affected package: intelliants/subrion

Affected version: <=4.2.1

Reported by:
GitHub