CVE-2014-9434

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-01-02 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter.

Affected products

Absolutengine Absolut Engine: 1.73

References

http://seclists.org/fulldisclosure/2014/Dec/131
http://sroesemann.blogspot.de/2014/12/sroeadv-2014-08.html
http://www.securityfocus.com/bid/71822
http://seclists.org/fulldisclosure/2014/Dec/131
http://sroesemann.blogspot.de/2014/12/sroeadv-2014-08.html
http://www.securityfocus.com/bid/71822

Get alerted when CVE-2014-9434 or the next vulnerability affects your stack