CVE-2014-6420

CVE-2014-6420 is an XSS vulnerability in Livefyre LiveComments 3.0. The flaw allows remote attackers to inject arbitrary web script or HTML by manipulating the name of an uploaded picture. The NVD description confirms the vulnerability type (Cross-site scripting) and affected component (LiveComme...