2 matches found
SUSE CVE-2014-9714
Cross-site scripting XSS vulnerability in the WddxPacket::recursiveAddVar function in HHVM aka the HipHop Virtual Machine before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddxserializevalue function...
4.3CVSS5.9AI score0.0214EPSS
SaveExploits1References3
CVE-2014-9714: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WddxPacket::recursiveAddVar function in HHVM aka the HipHop Virtual Machine before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddxserializevalue function...
4.3CVSS6AI score0.0214EPSS
SaveExploits1References2
20