CVE-2014-100030: Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2...

Security readout for executives and security teams

CVE-2014-100030 is a cross-site scripting issue in Ganesha Digital Library 4.2. A search parameter can accept injected script or HTML, which could make a trusted library site run attacker-controlled content in a visitor’s browser. Likely limited to organizations still running Ganesha Digital Library 4.2 with the affected search functionality reachable, especially on public web portals. The source bundle does not provide authoritative CPEs or broader affected-version data. Treat as an exposure cleanup item unless a public GDL 4.2 site is business-critical or handles authenticated users. Prioritize inventory first because severity and fixes are not documented in the supplied sources. Mitigation focus: Inventory any Ganesha Digital Library deployments and confirm exact version exposure.; Check current vendor or maintainer guidance for patches or upgrade paths.; Restrict public access to affected GDL 4.2 search pages where feasible..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.