2 matches found
CVE-2014-8992
Cross-site scripting XSS vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter...
5.7AI score0.014EPSS
SaveExploits1References1
CVE-2014-8992: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter...
4.3CVSS6AI score0.014EPSS
SaveExploits1References2
20