CVE-2014-8365

2022-10-0316:20:38

mitre

www.cve.org

xss

vulnerabilities

xornic contact us

web script

html

remote attackers

contact.php

path_info

setup.php

php_self variable

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) email parameter to contact.php or (3) PATH_INFO to setup.php, related to the “PHP_SELF” variable.