CVE-2014-2231

Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2014-02-27

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• I-doit (I-doit)

References

• http://secunia.com/advisories/56931
• http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=141