CVE-2014-2689
Slashes&dots Offria < 2.1.0 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to installer/index.php.
Scores
EPSS
0.0036
EPSS Percentile
57.8%
Details
CWE
CWE-79
Status
published
Products (2)
slashes\&dots/offria
< 2.1.0
n/a/n/a
Published
May 08, 2014
Tracked Since
Feb 18, 2026