CVE-2014-8996 Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) author_name or (2) content parameter to index.p...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) author_name or (2) content parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nibbleblog | <= 4.0.1 | No fix listed |
References
- blog.nibbleblog.com vendor-advisory
- packetstormsecurity.com exploit
- 20141117 Reflected XSS in Nibbleblog <= v4.0.1 exploit mailing-list
- 71111 vdb-entry
- nibbleblog-index-xss(98738) vdb-entry