CVE-2014-8954: XSS
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8954?
CVE-2014-8954 is considered a high severity vulnerability due to the potential for remote code execution via cross-site scripting.
How do I fix CVE-2014-8954?
To fix CVE-2014-8954, ensure that input validation and proper output encoding are implemented for the Title, Description, and filter parameters.
What are the affected versions for CVE-2014-8954?
CVE-2014-8954 affects phpSound version 1.0.5.
What types of attacks can CVE-2014-8954 facilitate?
CVE-2014-8954 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts.
Where do the vulnerabilities in CVE-2014-8954 occur?
The vulnerabilities in CVE-2014-8954 occur in the Title and Description fields of a playlist and the filter parameter in the explore action of index.php.