CVE-2014-8377

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone…

published October 21, 2014

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01427 · 72.6th percentile
Published
2014-10-21T15:00Z
EPSS history
Timeline
  • 21 OCT 15:00Z
    Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone…
    cvelistv5