Unscored CVE-2014-9405 EUVD-2014-9226GHSA-qrjx-wfph-47qh

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface …

Published Jan 6, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.

References

http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/74936
http://seclists.org/fulldisclosure/2015/Jun/1
http://www.securityfocus.com/archive/1/535660/100/0/threaded