Lucene search

K
cvelistMitreCVELIST:CVE-2014-9580
HistoryJan 08, 2015 - 7:00 p.m.

CVE-2014-9580

2015-01-0819:00:00
mitre
www.cve.org
2

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

66.1%

Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary web script or HTML via the Description field in a file upload. NOTE: this issue was originally incorrectly mapped to CVE-2014-1155; see CVE-2014-1155 for more information.

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

66.1%