Unscored CVE-2014-5322 EUVD-2014-5213GHSA-f8cc-jp4v-xmgp

Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows r…

Published Sep 22, 2014 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-3640.

References

1030880 vdb-entry
JVN#53579095 third-party-advisory
69987 vdb-entry
JVNDB-2014-000113 third-party-advisory