CVE-2014-4032

CVE-2014-4032 affects Fiyo CMS 1.5.7; XSS via the Nama field in apps/app_comment/form_comment.php. The exploit could inject script/HTML; CVSSv2 base score 4.3 (MEDIUM). No remediation details are provided in the supplied documents.