CVE:CVE-2014-2236
CNNVD:CNNVD-201403-095
Askbot是一套基于Django框架的开源问答软件（Q&A）。该软件包含话题讨论、问答知识管理、评论和答案转发等模块。
Askbot 0.7.48及之前版本中的tag和user查询表单存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade askbot askbot to a higher version than 0.7.48,0.7.40,0.7.41,0.7.42,0.7.43,0.7.44,0.7.45,0.7.46,0.7.47,and avoid the version (,0.7.48],0.7.40,0.7.41,0.7.42,0.7.43,0.7.44,0.7.45,0.7.46,0.7.47