What’s Vulnerable › Vulnerabilities

CVE-2014-8352

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-11-06 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to inject arbitrary web script or HTML via the max_date parameter.

Affected products

• French National Commission On Informatics And Liberty Cookieviz: all versions

References

• http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/3
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98452
• https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2
• http://packetstormsecurity.com/files/128960/CNIL-CookieViz-Cross-Site-Scripting-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/3
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98452
• https://github.com/LaboCNIL/CookieViz/commit/489b6050f6c53fe7b24c4bed3eeb9c25543960e2

Get alerted when CVE-2014-8352 or the next vulnerability affects your stack