CVE-2014-2235: Askbot

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

Affected products

• Askbot Askbot: up to and including 0.7.48

Published 2014-03-05. Last modified 2026-06-17.