Unscored CVE-2014-100037 EUVD-2014-1068GHSA-3p5h-4qjv-qqvw

Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via…

Published Jan 13, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/.

References

https://www.netsparker.com/xss-vulnerability-in-storytlr/
57182 third-party-advisory