CVE-2014-1403

MEDIO 4.3CVE-2014-1403 · Published 05/02/2014 · updated 17/06/2026

En resumen

CVE-2014-1403 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a easyxdm (easyxdm).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
easyxdm easyxdm	`= 2.3.2= 2.3.3= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6≤ 2.4.18`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value.

References

blog.kotowicz.net/2014/01/xssing-with-shakespeare-name-calling.html · Exploit
osvdb.org/102803
seclists.org/fulldisclosure/2014/Feb/5 · Exploit
secunia.com/advisories/56634 · Vendor Advisory
securityfocus.com/bid/65291
exchange.xforce.ibmcloud.com/vulnerabilities/90876
oyvindkinsey/easyXDM commit a3194d3 · Exploit
oyvindkinsey/easyXDM release 2.4.19 · Patch

Más vulnerabilidades de easyxdm

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free