CVE-2014-3877

Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting…

published June 18, 2014

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01914 · 79.7th percentile
Published
2014-06-18T14:00Z
EPSS history
Timeline
  • 18 JUN 14:00Z
    Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting…
    cvelistv5