2 matches found
CVE-2014-3861
Cross-site scripting XSS vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element...
5.6AI score0.01489EPSS
SaveExploits1References3
CVE-2014-3861: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element...
4.3CVSS5.9AI score0.01489EPSS
SaveExploits1References2
20