Lucene search

[email protected]CVE-2014-4524

HistoryJul 02, 2014 - 6:55 p.m.

CVE-2014-4524

2014-07-0218:55:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4524

cross-site scripting

xss

vulnerability

wp easy post types

plugin

remote attackers

web script

html

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

JSON

Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ref parameter.

Affected configurations

NVD

Node

wp_easy_post_types_projectwp_easy_post_typesRange≤1.4.3---wordpress

CPENameOperatorVersion
wp_easy_post_types_project:wp_easy_post_typeswp easy post types project wp easy post typesle1.4.3

CPE	Name	Operator	Version
wp_easy_post_types_project:wp_easy_post_types	wp easy post types project wp easy post types	le	1.4.3

References

codevigilant.com/disclosure/wp-plugin-easy-post-types-a3-cross-site-scripting-xss

wordpress.org/plugins/easy-post-types/changelog

plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=842687%40easy-post-types&old=806912%40easy-post-types&sfp_email=&sfph_mail=

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

JSON

Related for CVE-2014-4524

patchstack1 cvelist1 openvas1 nvd1 wpvulndb1 prion1