Description

Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka "MVC XSS Vulnerability."

Remediation

References

CVE-2014-4075

Related Vulnerabilities

Nginx Off-by-one Error Vulnerability (CVE-2021-23017)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23174)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-3281)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4592)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-28329)

Severity

Medium

Classification

CVE-2014-4075 CWE-707

Tags

Missing Update Known Vulnerabilities