NetSight
IP …
medium4.3

CVE-2014-5343

Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.

Impact

Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.

Affected products

VendorProductAffected versions
FengofficeFeng Office
Versions 1.6.2, 1.7, 1.7.1, 1.7.2, 1.7.3.1, 1.7.4

Weakness classification

CWE-79

References