CVE-2014-9938: Improper Encoding or Escaping of Output | Rapid7 Vulnerability Database