Description
Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.
Unscored
CVE-2014-8772
EUVD-2014-8602GHSA-9p76-42q7-9xch
Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject a…
Published Dec 3, 2014 · Updated Aug 6, 2024 · Assigned by mitre