XSS in Ithoughts Ithoughtshd

CVE-2014-1826

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (56.0th percentile) — read the EPSS interpretation.

Affected products

Ithoughts Ithoughtshd — versions 4.19
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)