CVE-2014-5317 Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php365 365 links | <= 3.11 | No fix listed |
| php365 365 links+ | <= 2.10 | No fix listed |
| php365 365 links 2+ | <= 2.10 | No fix listed |
| php365 365 links2 | <= 3.11 | No fix listed |
References
- JVN#36205251 third-party-advisory vendor-advisory
- JVNDB-2014-000106 third-party-advisory
- php365.com
- 69870 vdb-entry