CVE-2011-1714: Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDo...

Security readout for executives and security teams

CVE-2011-1714 is a cross-site scripting issue in a QooxDoo JSONP test resource used by eyeOS. If exposed, an attacker could cause a user's browser to run attacker-supplied script. Business impact depends on whether the old eyeOS/QooxDoo path is still reachable. Likely limited to legacy deployments exposing the named QooxDoo test resource, especially eyeOS 2.2 or 2.3. Evidence for other products or versions is explicitly uncertain in the source bundle. Prioritize discovery over emergency response unless the vulnerable path is exposed on a production or internet-facing system. The issue is old, public, and browser-impacting, but the bundle lacks severity scoring and active exploitation evidence. Mitigation focus: Check eyeOS and QooxDoo vendor guidance for supported fixes or upgrade paths.; Inventory and retire unsupported eyeOS 2.2 or 2.3 instances where possible.; Remove or restrict public access to exposed test resources only if vendor-supported..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.