CVE-2014-8266 - Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field

Published Feb 1, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.69%

Description

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

http://www.kb.cert.org/vuls/id/546340
third-party-advisoryx_refsource_CERT-VNPatchThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.kb.cert.org/vuls/id/546340		third-party-advisoryx_refsource_CERT-VNPatchThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Feb 1, 2015

Updated Aug 6, 2024

Reserved Oct 12, 2014

Link CVE-2014-8266

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-8266

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-8266