Description Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280. Remediation References CVE-2018-14481 Related Vulnerabilities MySQL CVE-2020-14837 Vulnerability (CVE-2020-14837) MySQL CVE-2016-0608 Vulnerability (CVE-2016-0608) XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208) WordPress Plugin Youtube shortcode Cross-Site Scripting (1.8.5) WordPress Plugin Newsletters PHP Object Injection (4.6.8.5) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-14481