Unrated severityNVD Advisory· Published Nov 17, 2014· Updated May 6, 2026
CVE-2014-8954
CVE-2014-8954
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.
Affected products
1- cpe:2.3:a:codecanyon:phpsound:1.0.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.