TI-2014-02513 CVE-2014-3148 · GHSA-g273-57rw-vg75Cross-site scripting (XSS) vulnerability in libahttp/err.c in OkCupid OKWS (OK Web…Priority LOW 24Cross-site scripting (XSS) vulnerability in libahttp/err.c in OkCupid OKWS (OK Web Server) allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to a non-existent page, which is not properly ha…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01923 · Published 2015-08-31 · No fix listed CWE-79