medium5.4
CVE-2014-3650
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content.
Impact
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss Aerogear | Version 1.0.0 |