CVE-2014-2843 Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infoware mapsuite | >= 1.0, < 1.0.36 | 1.0.36 |
| infoware mapsuite | >= 1.1.0, < 1.1.49 | 1.1.49 |
References
- iw.mapandroute.de vendor-advisory
- iw.mapandroute.de vendor-advisory
- www.christian-schneider.net third-party-advisory