CVE-2014-4331 OctavoCMS reflected XSS vulnerability

This proprietary content management software is vulnerable to reflected XSS on the file admin/viewer.php, src parameter. Current release on their demo site is vulnerable, same as other few sites I could find. PoC:...

CVE-2014-4331

CVE-2014-4331 is an XSS vulnerability affecting OctavoCMS up to version 3.1.1, exploitable through the src parameter in admin/viewer.php. The issue is reflected XSS; PoC demonstrates script injection on vulnerable demos. OpenVAS metadata indicates a WillNotFix remediation, and several vulnerabili...

OctavoCMS Cross Site Scripting

This proprietary content management software is vulnerable to reflected XSS on the file admin/viewer.php, src parameter. Current release on their demo site is vulnerable, same as other few sites I could find. PoC:...