CVE-2014-4694

2014-07-0210:00:00

mitre

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in suricata_select_alias.php in the Suricata package before 1.0.6 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via unspecified variables.

References

pfsense.org/security/advisories/pfSense-SA-14_13.packages.asc