Vulnerability Details CVE-2014-8707
Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 47.5%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 4.0
References