Lucene search

[email protected]CVE-2014-4583

HistoryJul 01, 2014 - 2:55 p.m.

CVE-2014-4583

2014-07-0114:55:05

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4583

xss

vulnerabilities

wp-contact

plugin

wordpress

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) edit, (2) order_direction, (3) limit_start, (4) id, or (5) order parameter.

Affected configurations

NVD

Node

wp-contact_plugin_projectwp-contact-sidebar-widgetRange≤1.0wordpress

CPENameOperatorVersion
wp-contact_plugin_project:wp-contact-sidebar-widgetwp-contact plugin project wp-contact-sidebar-widgetle1.0

CPE	Name	Operator	Version
wp-contact_plugin_project:wp-contact-sidebar-widget	wp-contact plugin project wp-contact-sidebar-widget	le	1.0

References

codevigilant.com/disclosure/wp-plugin-wp-contact-sidebar-widget-a3-cross-site-scripting-xss

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Related for CVE-2014-4583

nvd1 prion1 cvelist1 wpvulndb1 patchstack1