CVE-2014-9522 Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject arbitrary web script or HTML via the (1) author field to guestbook.php or (2) u...
MediumCVSS 4.3
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject arbitrary web script or HTML via the (1) author field to guestbook.php or (2) username field to account.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| papoo cms papoo light | = 6.0.0 | No fix listed |
References
- 115944 vdb-entry
- packetstormsecurity.com exploit
- sroesemann.blogspot.de exploit
- 35551 exploit
- 20141215 Persistent XSS Vulnerability in CMS Papoo Light v6.0.0 Rev. 4701 mailing-list
- 71676 vdb-entry