CVE-2014-9243

🗓️ 03 Dec 2014 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Multiple XSS vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via various parameters in wb/admin/admintools and wb/modules/

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2014-9243	3 Dec 201421:00	–	cvelist
EUVD	EUVD-2014-9068	7 Oct 202500:30	–	euvd
NVD	CVE-2014-9243	3 Dec 201421:59	–	nvd
Prion	Cross site scripting	3 Dec 201421:59	–	prion
RedhatCVE	CVE-2014-9243	22 May 202501:52	–	redhatcve

NVD

Node

websitebaker websitebakerMatch2.8.3

Source	Link
seclists	www.seclists.org/fulldisclosure/2014/Nov/44
packetstormsecurity	www.packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html

Parameter	Position	Path	Description	CWE
QUERY_STRING	query param	wb/admin/admintools/tool.php	Reflected XSS via query string in admin tools	CWE-79
section_id	query param	wb/modules/edit_module_files.php	XSS via section_id parameter in edit_module_files.php	CWE-79

06 May 2026 22:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

EPSS0.00649

CWE-79