CVE-2014-0341

Published: Apr 15, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject arbitrary web script or HTML via the title field to (1) templates_internal/pages.tpl, (2) templates_internal/home.tpl, or (3) templates_internal/entries.tpl; (4) an event field to objects.php; or the (5) email or (6) nickname field to pages.php, related to templates_internal/users.tpl.

Affected (18)

Products: Pivotx: Pivotx

Pivotx

1 product

Pivotx

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Pivotx Pivotx	Up to 2.3.8
Pivotx Pivotx	Version 2.1.0
Pivotx Pivotx	Version 2.1.1
Pivotx Pivotx	Version 2.1.2
Pivotx Pivotx	Version 2.2.0
Pivotx Pivotx	Version 2.2.0 b1
Pivotx Pivotx	Version 2.2.0 b2
Pivotx Pivotx	Version 2.2.0 rc
Pivotx Pivotx	Version 2.2.1
Pivotx Pivotx	Version 2.2.2
Pivotx Pivotx	Version 2.2.3
Pivotx Pivotx	Version 2.2.5
Pivotx Pivotx	Version 2.3.0
Pivotx Pivotx	Version 2.3.2
Pivotx Pivotx	Version 2.3.3
Pivotx Pivotx	Version 2.3.5
Pivotx Pivotx	Version 2.3.6
Pivotx Pivotx	Version 2.3.7