CVE-2013-5749
Simplerisk < 20130915-001 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter.
Scores
EPSS
0.0022
EPSS Percentile
45.1%
Details
CWE
CWE-79
Status
published
Products (2)
simplerisk/simplerisk
< 20130915-001
n/a/n/a
Published
May 12, 2014
Tracked Since
Feb 18, 2026