2 matches found
CVE-2014-2729
Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...
5.2AI score0.00972EPSS
SaveExploits3References3
CVE-2014-2729: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...
3.5CVSS6AI score0.00972EPSS
SaveExploits3References2
20