[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2014-9498":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":30,"references":32,"score":38,"epss_score":39,"epss_percentile":40,"is_kev":41,"cisa_kev_date_added":42,"cisa_kev_due_date":42,"cisa_ssvc":43,"attack_mappings":49,"exploits":56},173726,"CVE-2014-9498","EUVD-2014-9315","Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit any content permission to inject arbitrary web script or HTML via a node title.","2015-01-09T18:59:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","MEDIUM","NONE",true,[21],"CWE-79",[23,24,25,26,27,28,29],"cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-2.1:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-2.3:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-1.1:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-1.2:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-1.0:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-2.2:*:*:*:*:drupal:*:*","cpe:2.3:a:webform_invitation_project:webform_invitation:7.x-2.0:*:*:*:*:drupal:*:*",[31],"Webform_Invitation_Project Webform Invitation",[33,34,35,36,37],"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F01\u002F03\u002F2","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F01\u002F04\u002F6","https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2386011","https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2386013","https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2386387",0.38,0.00946,0.60799,false,null,{"timestamp":42,"automatable":44,"tech_impact":45,"exploitation":46,"cisa_decision":47,"cisa_remediation_timeline":48},"no","partial","none",{},"FSU",[50],{"name":51,"source":52,"tactics":53,"technique_id":55},"Exploit Public-Facing Application","attack_vector",[54],"initial-access","T1190",[]]