Is intelliants/subrion safe to use?

intelliants/subrion has 26 known vulnerabilities on the latest version (v4.2.1). DepScope rates its health at 12/100 (critical risk).

What is the latest version of intelliants/subrion?

The latest version of intelliants/subrion is v4.2.1, released 2018-06-14.

Does intelliants/subrion have known vulnerabilities?

Yes. intelliants/subrion has 26 known vulnerabilities. See depscope.dev/pkg/composer/intelliants/subrion for details.

Is intelliants/subrion deprecated?

No, intelliants/subrion is actively maintained. Latest release: v4.2.1 (2018-06-14).

What are alternatives to intelliants/subrion?

DepScope has no curated alternatives for intelliants/subrion at this time.

What license does intelliants/subrion use?

intelliants/subrion is licensed under GPL v3.

intelliants/subrion

composervv4.2.1

Powerful opensource content management system written in PHP5 + MySQL.

License GPL v3strong copyleft14 versions2 maintainers2 deps

intelliants/subrion

/ 100

Health

do not use

intelliants/subrion has critical vulnerabilities — do not use

Update to >= 4.2.2 to fix known vulnerabilities

Moderate health score (12/100) — verify manually
5 high severity vulnerabilities
1 critical vulnerabilities

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

0/25

security

9/15

maturity

3/15

community

Vulnerabilities

1 critical5 high20 medium

Advisories (26)

Severity	ID	Summary	Fixed in
high	CVE-2023-46947	Subrion remote command execution vulnerability	—
medium	CVE-2022-43120	Subrion CMS is vulnerable to Cross-Site Scripting (XSS)	—
high	CVE-2020-12468	Subrion CMS CSV injection via Export Language	—
medium	CVE-2023-43828	Subrion CMS Cross-site Scripting vulnerability in /panel/languages	—
medium	CVE-2023-43875	Subrion CMS vulnerable to Cross-site Scripting	—
high	CVE-2018-19422	Subrion CMS RCE Vulnerability	4.2.2
critical	CVE-2020-18155	SQL Injection in Subrion CMS	—
medium	CVE-2023-43884	Subrion CMS Cross-site Scripting vulnerability	—
high	CVE-2020-18326	Cross Site Request Forgery in intelliants/subrion	—
medium	CVE-2025-70958	Subrion CMS vulnerable to cross-site scripting	—
medium	CVE-2020-12469	Subrion CMS PHP Object Injection	—
high	CVE-2021-43464	Remote code execution in Subrion	—
medium	CVE-2025-56556	Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool	—
medium	CVE-2020-22392	Cross Site Scripting in Subrion CMS	—
medium	CVE-2020-22330	Subrion Cross-Site Scripting (XSS) vulnerability	4.2.2
medium	CVE-2022-43121	Subrion CMS is vulnerable to Cross-Site Scripting (XSS)	—
medium	CVE-2021-41948	Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin	—
medium	CVE-2021-41502	Cross site scripting in intelliants/subrion	—
medium	CVE-2020-18325	Cross-site Scripting in intelliants/subrion	—
medium	CVE-2024-25399	Subrion CMS vulnerable to Cross Site Scripting	—

... and 6 more

Threat intelligence

1 likely exploited (EPSS ≥ 0.5)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

Health History

Dependency Tree

License Audit

Dependencies (2)

php composer/installers

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/intelliants/subrion

Last updated · 2018-06-14T12:04:55+00:00

Severity

Summary

Fixed in

high

CVE-2023-46947

Subrion remote command execution vulnerability

—

medium

CVE-2022-43120

Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

—

high

CVE-2020-12468

Subrion CMS CSV injection via Export Language

—

medium

CVE-2023-43828

Subrion CMS Cross-site Scripting vulnerability in /panel/languages

—

medium

CVE-2023-43875

Subrion CMS vulnerable to Cross-site Scripting

—

high

CVE-2018-19422

Subrion CMS RCE Vulnerability

4.2.2

critical

CVE-2020-18155

SQL Injection in Subrion CMS

—

medium

CVE-2023-43884

Subrion CMS Cross-site Scripting vulnerability

—

high

CVE-2020-18326

Cross Site Request Forgery in intelliants/subrion

—

medium

CVE-2025-70958

Subrion CMS vulnerable to cross-site scripting

—

medium

CVE-2020-12469

Subrion CMS PHP Object Injection

—

high

CVE-2021-43464

Remote code execution in Subrion

—

medium

CVE-2025-56556

Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool

—

medium

CVE-2020-22392

Cross Site Scripting in Subrion CMS

—

medium

CVE-2020-22330

Subrion Cross-Site Scripting (XSS) vulnerability

4.2.2

medium

CVE-2022-43121

Subrion CMS is vulnerable to Cross-Site Scripting (XSS)

—

medium

CVE-2021-41948

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

—

medium

CVE-2021-41502

Cross site scripting in intelliants/subrion

—

medium

CVE-2020-18325

Cross-site Scripting in intelliants/subrion

—

medium

CVE-2024-25399

Subrion CMS vulnerable to Cross Site Scripting

—