system
Describe <CVE-2014-3875>.
user
What is <CVE-2014-3875>?
assistant
The addto parameter to fup in Frams' Fast File EXchange (F*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scripting (XSS) attacks.