CVE-2014-8780: Jease

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a content section note.

Affected products

• Jease Jease: version 2.11 only

Published 2018-03-07. Last modified 2026-06-17.