Description

Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value.

Remediation

References

CVE-2014-1403

Related Vulnerabilities

Oracle Database Server CVE-2006-5339 Vulnerability (CVE-2006-5339)

Artifactory Incorrect Authorization Vulnerability (CVE-2021-45074)

WordPress Plugin OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) Cross-Site Scripting (1.1.1)

ownCloud Files or Directories Accessible to External Parties Vulnerability (CVE-2015-4715)

phpBB Improper Initialization Vulnerability (CVE-2001-1471)

Severity

Medium

Classification

CVE-2014-1403 CWE-707

Tags

Missing Update Known Vulnerabilities