Cross site scripting

Cross-site scripting XSS vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to archives/...

CVE-2014-100037

Cross-site scripting XSS vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to archives/...

CVE-2014-100037

CVE-2014-100037 : Storytlr 1.3.dev and earlier is vulnerable to cross-site scripting (XSS) via PATH_INFO to archives/, allowing remote attackers to inject arbitrary web script or HTML. The connected records corroborate an XSS issue in Storytlr with the same vector. No remediation details (patch/v...