Security Advisory
CVE-2017-6066
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter.