CVE-2014-2965: Spamtitan

Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter.

Affected products

• Spamtitan Spamtitan: up to and including 6.03; version 5.04 only; version 5.05 only; version 5.06 only; version 5.07 only; version 5.08 only; …

Published 2014-07-03. Last modified 2026-06-17.