CVE-2014-9772

MEDIUM · CVSS 6.1 EPSS 2.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-9772

Severity

MEDIUM

CVSS

6.1

EPSS

2.64%

The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters.