exploitDog

CVE-2014-2219

Опубликовано: 20 мар. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cmsimple:cmsimple_classic:*:*:*:*:*:*:*:*

Версия до 3.5.4 (включая)

EPSS

Процентиль: 49%

0.00254

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-g532-jv38-f9x7

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter.

EPSS

Процентиль: 49%

0.00254

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79