Beta

Report

NewsFlash < 6.x-1.7,< 7.x-2.5 is vulnerable to Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated
Published
2014-03-04

Authenticated Cross Site Scripting (XSS) vulnerability

CVE

https://www.cve.org/CVERecord?id=CVE-2014-8077

CVSS

Score:4.3

Severity:Medium

Version:< 6.x-1.7,< 7.x-2.5

There is a patch available in v6.x-1.7,7.x-2.5 and we strongly recommend you update to this version as soon as possible.