CVE-2014-8944: XSS
Published Jun 1, 2020
·Updated
Lexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the admin.php?page=config installname, intromessage, or newfilecontent parameter.
Affected Software
1 affected component
piwigo Lexiglot<=2014-11-20
Event History
Jun 1, 2020
CVE Published
via MITRE·04:27 PM
Data Sourced
via MITRE·04:27 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2014-8944.
2
What is the severity of CVE-2014-8944 vulnerability?
The severity of CVE-2014-8944 vulnerability is medium with a score of 5.4.
3
What software is affected by CVE-2014-8944 vulnerability?
The Piwigo Lexiglot software up to version 2014-11-20 is affected by CVE-2014-8944 vulnerability.
4
How does CVE-2014-8944 vulnerability manifest?
CVE-2014-8944 vulnerability manifests as XSS (Reflected) through the username or XSS (Stored) through the admin.php?page=config install_name, intro_message, or new_file_content parameter.
5
Is there a fix available for CVE-2014-8944 vulnerability?
Yes, the fix for CVE-2014-8944 vulnerability is to upgrade to a version of Piwigo Lexiglot later than 2014-11-20.