CVE-2014-4331

Cross-site scripting XSS vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter...

CVE-2014-4331

CVE-2014-4331 is an XSS vulnerability affecting OctavoCMS up to version 3.1.1, exploitable through the src parameter in admin/viewer.php. The issue is reflected XSS; PoC demonstrates script injection on vulnerable demos. OpenVAS metadata indicates a WillNotFix remediation, and several vulnerabili...