CVE-2014-2235

CVE-2014-2235

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=1070852 http://secunia.com/advisories/57163 https://github.com/ASKBOT/askbot-devel/commit/876e3662ff6b78cc6241338c15e3a0cb49edf4e2 http://www.openwall.com/lists/oss-security/2014/02/28/8 http://www.securityfocus.com/bid/65885