CVE-2014-1224

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to…

published October 6, 2014

CVSS
—
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01854 · 79.0th percentile
Published
2014-10-06T23:00Z
EPSS history
Timeline
  • 06 OCT 23:00Z
    Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to…
    cvelistv5