[intelliants/subrion] Cross-site scripting (XSS) vulnerability exists in the “contact us” plugin for Subrion CMS

A cross-site scripting (XSS) vulnerability exists in the “contact us” plugin for Subrion CMS <= 4.2.1 version via “List of subjects”.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-41948
• https://github.com/intelliants/subrion-plugin-contact_us/issues/8
• https://github.com/advisories/GHSA-jv64-2m3x-6v4q