CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2861

Incomplete blacklist vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string, as demonstrated by bypassing a protection mechanism that removes only the "alert" string.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 56.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-2861

Paperthin » Commonspot Content Server » Version: N/A

cpe:2.3:a:paperthin:commonspot_content_server:-
Paperthin » Commonspot Content Server » Version: 7.0.1

cpe:2.3:a:paperthin:commonspot_content_server:7.0.1
Paperthin » Commonspot Content Server » Version: 8.0.0

cpe:2.3:a:paperthin:commonspot_content_server:8.0.0
Paperthin » Commonspot Content Server » Version: 8.0.1

cpe:2.3:a:paperthin:commonspot_content_server:8.0.1
Paperthin » Commonspot Content Server » Version: 8.0.2

cpe:2.3:a:paperthin:commonspot_content_server:8.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2861

Products

Pricing

Contact Us