CVE-2014-4033 Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname paramete...
MediumCVSS 4.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efrontlearning efront | = 3.6.14.4 | No fix listed |
References
- packetstormsecurity.com exploit
- 33697 exploit
- 67946 vdb-entry
- github.com