3.5
CVSSv2

CVE-2014-2729

Published: 25/04/2014 Updated: 09/10/2018
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 prior to 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option.

Vulnerable Product Search on Vulmon Subscribe to Product

ektron ektron content management system 8.7.0

Exploits

Ektron CMS version 87 suffers from a cross site scripting vulnerability ...