TI-2014-03167 CVE-2014-3894 · GHSA-wwm2-92w8-6wvpCross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free…Priority LOW 22Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00931 · Published 2014-07-20 · No fix listed CWE-79