3 matches found
CVE-2014-4032
Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...
PT-2014-5684
Name of the Vulnerable Software and Affected Versions Fiyo CMS version 1.5.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Nama field. This could potentially lead to unauthorized actions on the web application. Recommendations...
CVE-2014-4032: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in apps/appcomment/formcomment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field...