CVE-2013-4507 - Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Nov 19, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 0.93%

Description

Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://secunia.com/advisories/55481
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.collectiveaccess.org/news/collectiveaccess-version-1-3-1-released
x_refsource_CONFIRMPatch

Link	Providers	Tags
http://secunia.com/advisories/55481		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.collectiveaccess.org/news/collectiveaccess-version-1-3-1-released		x_refsource_CONFIRMPatch