PT-2014-6406
CVE-2014-5322
·
Published
2014-09-22
·
Updated
2015-07-29
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
FileMaker Pro versions prior to 13
FileMaker Pro Advanced versions prior to 13
Description
A cross-site scripting (XSS) issue exists in the Instant Web Publish function, allowing remote attackers to inject arbitrary web script or HTML. This issue arose due to an incorrect fix for a previous problem.
Recommendations
For FileMaker Pro versions prior to 13, update to version 13 or later.
For FileMaker Pro Advanced versions prior to 13, update to version 13 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾