CVE-2014-2860

MEDIUM · CVSS 4.3 EPSS 2.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-04-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-2860

Severity

MEDIUM

CVSS

4.3

EPSS

2.03%

Java

Original NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to inject arbitrary web script or HTML via a crafted HTTP request to a (1) ColdFusion or (2) JavaScript component.