Description WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat parameter. Remediation References CVE-2014-5114 Related Vulnerabilities Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246) WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17094) Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268) XWikiplatform Insufficient UI Warning of Dangerous Operations Vulnerability (CVE-2025-49585) WordPress Plugin Simple Membership SQL Injection (4.0.3) Severity High Classification CVE-2014-5114 Tags Missing Update Known Vulnerabilities