CVE-2014-4742: Cross-site scripting (XSS) vulnerability in system/class_link.php in the System module (module_system) in K...

Security readout for executives and security teams

This CVE describes a cross-site scripting flaw in Kajona before 4.5. A remote attacker could inject script or HTML through a request parameter, potentially affecting users who view the resulting page. The source data does not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to internet-facing Kajona CMS deployments running versions before 4.5, especially where the System module media folder functionality is reachable. The source metadata does not provide CPEs or detailed affected configurations. Prioritize remediation if Kajona before 4.5 is publicly reachable or used by privileged staff. For organizations not running Kajona, this is informational. The age of the CVE lowers novelty, but legacy CMS exposure can still create account and browser-session risk. Mitigation focus: Upgrade Kajona to version 4.5 or later if vendor guidance confirms the fix.; Review the referenced Kajona commit and changelog for exact remediation scope.; Restrict access to administrative or media management functions where feasible..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.