Skip to content
OpenAdvisories
Unscored CVE-2014-8266 EUVD-2014-8107GHSA-mvfw-mv76-2rpc

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to …

Published Feb 1, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.

References