CVE-2014-100013: Clientresponse Project Clientresponse

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject or (2) Message field.

Affected products

• Clientresponse Project Clientresponse: version 4.1 only

Published 2015-01-13. Last modified 2026-06-17.