TI-2014-02378 CVE-2014-2971 · GHSA-pcf3-p5mw-rwhjCross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints…Priority LOW 19Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00912 · Published 2014-07-24 · No fix listed CWE-79