Vulnerabilities > Codecanyon > Phpsound > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-11-17 | CVE-2014-8954 | Cross-Site Scripting vulnerability in Codecanyon PHPsound 1.0.5 Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php. | 4.3 |