CVE-2014-1232

2014-01-0815:30:02

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-1232

cross-site scripting

xss

foliopress wysiwyg plugin

wordpress

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

foliovisionfoliopress_wysiwygRange≤2.6.8.4

foliovisionfoliopress_wysiwygMatch2.6.8

foliovisionfoliopress_wysiwygMatch2.6.8.1

foliovisionfoliopress_wysiwygMatch2.6.8.2

foliovisionfoliopress_wysiwygMatch2.6.8.3

AND

wordpresswordpressMatch-

CPENameOperatorVersion
foliovision:foliopress_wysiwygfoliovision foliopress wysiwygle2.6.8.4
foliovision:foliopress_wysiwygfoliovision foliopress wysiwygeq2.6.8
foliovision:foliopress_wysiwygfoliovision foliopress wysiwygeq2.6.8.1
foliovision:foliopress_wysiwygfoliovision foliopress wysiwygeq2.6.8.2
foliovision:foliopress_wysiwygfoliovision foliopress wysiwygeq2.6.8.3

CPE	Name	Operator	Version
foliovision:foliopress_wysiwyg	foliovision foliopress wysiwyg	le	2.6.8.4
foliovision:foliopress_wysiwyg	foliovision foliopress wysiwyg	eq	2.6.8
foliovision:foliopress_wysiwyg	foliovision foliopress wysiwyg	eq	2.6.8.1
foliovision:foliopress_wysiwyg	foliovision foliopress wysiwyg	eq	2.6.8.2
foliovision:foliopress_wysiwyg	foliovision foliopress wysiwyg	eq	2.6.8.3