[intelliants/subrion] Remote code execution in Subrion

Subrion is an open source php content management system. A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-43464
• https://github.com/intelliants/subrion/issues/888
• https://github.com/advisories/GHSA-g54x-29xv-58h5