CVE-2014-8674

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.

Affected products

Soplanning

Soplanning

< 1.33

Fix

Available

CVSS 3.1

5.4 MEDIUM

EPSS

2.6% (84th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2020-01-06