Qpr Portal vulnerabilities

• qpr portal QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request. CVE-2014-8268 6.4 MediumFebruary 1, 2015
• qpr portal Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote... CVE-2014-8267 4.3 MediumFebruary 1, 2015
• qpr portal Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014... CVE-2014-8266 4.3 MediumFebruary 1, 2015