b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9599)

Description

Cross-site scripting (XSS) vulnerability in the filemanager in b2evolution before 5.2.1 allows remote attackers to inject arbitrary web script or HTML via the fm_filter parameter to blogs/admin.php.

Remediation

References

CVE-2014-9599

Related Vulnerabilities

WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0)

WordPress Plugin New Year Firework Cross-Site Scripting (1.1.9)

Oracle Database Server CVE-2020-2512 Vulnerability (CVE-2020-2512)

WordPress Plugin DZS Video Gallery Multiple Cross-Site Scripting Vulnerabilities (All)

ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4848)

Severity

Medium

Classification

CVE-2014-9599 CWE-707