CVE-2014-4743: Multiple cross-site scripting (XSS) vulnerabilities in (1) search_ajax.tpl and (2) search_ajax_small.tpl in...

Security readout for executives and security teams

CVE-2014-4743 is a cross-site scripting issue in Kajona’s Search module before version 4.5. A remote attacker could inject script or HTML through the search parameter, potentially affecting users who view crafted search results. The public sources do not show active exploitation or a CVSS score. Exposure is most likely on public Kajona installations older than 4.5 with the Search module enabled and reachable by untrusted users. The source bundle does not identify affected package distributions, hosted services, or specific deployment defaults beyond the module and template paths. Address during normal vulnerability remediation, faster for internet-facing legacy Kajona sites. The business risk is user-session or content manipulation through browser-executed script, but public evidence does not support emergency treatment. Mitigation focus: Upgrade Kajona to version 4.5 or later where vendor guidance supports it.; Review the upstream commit if maintaining a custom or forked Kajona deployment.; Check vendor advisories before applying nonstandard backports or compensating controls..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.