Security Advisory

CVE-2014-8674

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-06 21:40:51
Last updated 2024-08-06 13:26:02
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.