CVE-2014-2024

The CVE-2014-2024 issue is a real XSS in Open Classifieds 2.x (pre-2.1.3), caused by insufficient sanitisation of user data in the URI to /shared-apartments-rooms/. Open Classifieds 2-2.1.2 (and prior) are affected; a crafted link can execute arbitrary HTML/script in the context of a logged-in us...