CVE-2014-8772

The CVE CVE-2014-8772 affects X3 CMS versions 0.5.1 and 0.5.1.1. The vulnerability is a Cross-site scripting (XSS) issue in the search_controller that allows remote authenticated users to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSS2 base score of 3.5 (...