Lucene search
HistoryJul 01, 2014 - 2:55 p.m.
CVE-2014-4521
cve-2014-4521
cross-site scripting
xss
vulnerability
client-assist.php
dsidxpress idx plugin
wordpress
remote attackers
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.0%
Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Affected configurations
Node
diversesolutionsdsidxpress_idx_pluginRange≤2.1.0wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.0wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.1wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.2wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.3wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.4wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.5wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.6wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.7wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.8wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.9wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.10wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.11wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.12wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.13wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.14wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.15wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.16wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.17wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.18wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.19wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.20wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.21wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.22wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.23wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.24wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.25wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.26wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.27wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.28wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.29wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.30wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.31wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.32wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.33wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.34wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.35wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.36wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.37wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.38wordpress
ORdiversesolutionsdsidxpress_idx_pluginMatch2.0.39wordpress
Related
openvas
openvas
WordPress dsIDXpress IDX Plugin Cross Site Scripting Vulnerability
2014-08-11 00:00:00
cvelist
cvelist
CVE-2014-4521
2014-07-01 14:00:00
prion
prion
Cross site scripting
2014-07-01 14:55:00
wpvulndb
wpvulndb
Dsidxpress < 2.1.1 - XSS
2014-04-25 00:00:00
nvd
nvd
CVE-2014-4521
2014-07-01 14:55:05
patchstack
patchstack
WordPress dsIDXpress IDX Plugin <= 2.1.0 - XSS
2014-06-23 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.0%
Related for CVE-2014-4521