CVE-2014-2971

Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter.

• CWE-79

• http://www.kb.cert.org/vuls/id/875548Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/875548Third Party Advisory, US Government Resource

Published

Jul 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2965Cross-site scripting (XSS) vulnerability in auth-settings-x.…
• CVE-2014-2966The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not p…
• CVE-2014-2967Autodesk VRED Professional 2014 before SR1 SP8 allows remote…
• CVE-2014-2968Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2014-2969NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 …
• CVE-2014-2970Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-2972expand.c in Exim before 4.83 expands mathematical comparison…
• CVE-2014-2973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-2974Cross-site request forgery (CSRF) vulnerability in php/user_…
• CVE-2014-2975Cross-site scripting (XSS) vulnerability in php/user_account…
• CVE-2014-2976Directory traversal vulnerability in Sixnet SixView Manager …
• CVE-2014-2977Multiple integer signedness errors in the Dispatch_Write fun…