SecBoard
Zurück zur CVE-Übersicht

CVE-2014-8996

MEDIUM(4.3)

AV:N/AC:M/Au:N/C:N/I:P/A:N

Risk Signal Score11/100 — NIEDRIG
  • CVSS 4.3 — Mittel

EPSS-Score

2%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

4.3

Technische Schwere

Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) author_name or (2) content parameter to index.php.

Referenzen