CVE-2014-4710

Publication date

2014-07-29 14:00:00

Family

mitre

State

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field.