Security Advisory
CVE-2014-2570
4.3
Vulnerability Description
Cross-site scripting (XSS) vulnerability in www/make_subset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Published Date
August 31, 2015
Official Source
NIST NVD Advisory