Vulnerabilities > Urbackup > Urbackup Server > 1.4.14

DATE CVE VULNERABILITY TITLE RISK
2017-12-17 CVE-2017-16950 Cross-site Scripting vulnerability in Urbackup Server
Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
network
low complexity
urbackup CWE-79
6.1