Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.
References
Configurations
Information
Published : 2014-11-17 08:59
Updated : 2015-08-06 09:45
NVD link : CVE-2014-8954
Mitre link : CVE-2014-8954
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
codecanyon
- phpsound