CVE-2014-9599

CVE-2014-9599 : XSS in the b2evolution filemanager. The vulnerability occurs in the filemanager’s fm_filter parameter used by blogs/admin.php on versions prior to 5.2.1, due to insufficient input validation. Exploitation is remote and can cause injection of arbitrary web script/HTML. Affected pro...