CVE-2014-9004
20.11.2014, 13:55
Cross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a member_profile action to index.php.
| Vendor | Product | Version |
|---|---|---|
| vld_interactive | vldpersonals | 𝑥 ≤ 2.7 |
𝑥
= Vulnerable software versions