CVE-2014-100037 - Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/

Published Jan 13, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 0.98%

Description

Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://secunia.com/advisories/57182
third-party-advisoryx_refsource_SECUNIA
https://www.netsparker.com/xss-vulnerability-in-storytlr/
x_refsource_MISCExploit

Link	Providers	Tags
http://secunia.com/advisories/57182		third-party-advisoryx_refsource_SECUNIA
https://www.netsparker.com/xss-vulnerability-in-storytlr/		x_refsource_MISCExploit