SecBoard
Zurück zur CVE-Übersicht

CVE-2014-8954

MEDIUM(4.3)

AV:N/AC:M/Au:N/C:N/I:P/A:N

Risk Signal Score12/100 — NIEDRIG
  • CVSS 4.3 — Mittel

EPSS-Score

3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

4.3

Technische Schwere

Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.

Referenzen