CVE-2014-100036 - Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI

Published Jan 13, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.89%

Description

Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://secunia.com/advisories/57808
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/92538
vdb-entryx_refsource_XF
https://github.com/evacchi/flatpress/issues/14
x_refsource_CONFIRM
https://www.netsparker.com/critical-xss-vulnerabilities-in-flatpress/
x_refsource_MISCExploit

Link	Providers	Tags
http://secunia.com/advisories/57808		third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/92538		vdb-entryx_refsource_XF
https://github.com/evacchi/flatpress/issues/14		x_refsource_CONFIRM
https://www.netsparker.com/critical-xss-vulnerabilities-in-flatpress/		x_refsource_MISCExploit