Cross site scripting

2020-01-2820:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

JSON

Cross-site scripting (XSS) vulnerability in TennisConnect COMPONENTS 9.927 allows remote attackers to inject arbitrary web script or HTML via the pid parameter to index.cfm.

CPENameOperatorVersion
componentseq9.927

CPE	Name	Operator	Version
	components	eq	9.927

References

seclists.org/fulldisclosure/2014/Dec/83

tetraph.com/security/cves/cve-2014-8490-tennisconnect-components-system-xss-cross-site-scripting-security-vulnerability/