[intelliants/subrion] Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

Cross Site Scripting (XSS) in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-37059
• https://drive.google.com/file/d/1lmU8zuyzyC9LHFXuXzamnkcLcjcfs0xE/view?usp=sharing
• https://github.com/advisories/GHSA-rh4r-9689-6xw4