CVE-2014-4958 - CVE House
Back to Database
Status published Medium CVE-2014-4958

Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions allows remote attackers to inject arbitrary web script or HTML via CSS expressions in style attributes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4958

Credits & Attribution

No credits recorded in the NVD database.

References

More from telerik

View All →
CVE-2020-13661
Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs...
High 8.8
CVE-2020-11414
An issue was discovered in Progress Telerik UI for Silverlight...
High 7.5
CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a...
Unknown 0
CVE-2018-15122
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and...
High 7.8
CVE-2017-11317
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1...
Unknown 0

Affected Vendor

Affected Software

asp.net ajax radeditor control
Vulnerable Versions:
0, 2009.3.1208.20

Timeline

Official Publish: September 26th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.