Lucene search

[email protected]CVE-2014-5344

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-5344

2022-10-0316:20:43

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-5344

cross-site scripting

xss

vulnerability

mobiloud

wordpress

remote attackers

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

mobiloudmobiloudRange≤2.3.7wordpress

mobiloudmobiloudMatch1.0wordpress

mobiloudmobiloudMatch1.2.4wordpress

mobiloudmobiloudMatch1.2.5wordpress

mobiloudmobiloudMatch1.2.6wordpress

mobiloudmobiloudMatch1.2.7wordpress

mobiloudmobiloudMatch1.3wordpress

mobiloudmobiloudMatch1.3.6wordpress

mobiloudmobiloudMatch1.3.7wordpress

mobiloudmobiloudMatch1.3.8wordpress

mobiloudmobiloudMatch1.4wordpress

mobiloudmobiloudMatch1.4.1wordpress

mobiloudmobiloudMatch1.5wordpress

mobiloudmobiloudMatch1.5.1wordpress

mobiloudmobiloudMatch1.5.2wordpress

mobiloudmobiloudMatch1.5.3wordpress

mobiloudmobiloudMatch1.5.4wordpress

mobiloudmobiloudMatch1.6wordpress

mobiloudmobiloudMatch1.6.1wordpress

mobiloudmobiloudMatch1.6.2wordpress

mobiloudmobiloudMatch1.7wordpress

mobiloudmobiloudMatch1.7.1wordpress

mobiloudmobiloudMatch1.7.2wordpress

mobiloudmobiloudMatch1.7.4wordpress

mobiloudmobiloudMatch1.7.5wordpress

mobiloudmobiloudMatch1.7.6wordpress

mobiloudmobiloudMatch1.8.0wordpress

mobiloudmobiloudMatch1.8.1wordpress

mobiloudmobiloudMatch1.8.2wordpress

mobiloudmobiloudMatch1.8.5wordpress

mobiloudmobiloudMatch1.8.6wordpress

mobiloudmobiloudMatch1.8.7wordpress

mobiloudmobiloudMatch1.8.8wordpress

mobiloudmobiloudMatch1.8.9wordpress

mobiloudmobiloudMatch1.8.10wordpress

mobiloudmobiloudMatch1.8.11wordpress

mobiloudmobiloudMatch1.8.12wordpress

mobiloudmobiloudMatch1.8.14wordpress

mobiloudmobiloudMatch1.8.15wordpress

mobiloudmobiloudMatch1.8.16wordpress

mobiloudmobiloudMatch1.9.0wordpress

mobiloudmobiloudMatch1.9.1wordpress

mobiloudmobiloudMatch2.1wordpress

mobiloudmobiloudMatch2.3wordpress

mobiloudmobiloudMatch2.3.1wordpress

CPENameOperatorVersion
mobiloud:mobiloudmobiloudle2.3.7
mobiloud:mobiloudmobiloudeq1.0
mobiloud:mobiloudmobiloudeq1.2.4
mobiloud:mobiloudmobiloudeq1.2.5
mobiloud:mobiloudmobiloudeq1.2.6
mobiloud:mobiloudmobiloudeq1.2.7
mobiloud:mobiloudmobiloudeq1.3
mobiloud:mobiloudmobiloudeq1.3.6
mobiloud:mobiloudmobiloudeq1.3.7
mobiloud:mobiloudmobiloudeq1.3.8

CPE	Name	Operator	Version
mobiloud:mobiloud	mobiloud	le	2.3.7
mobiloud:mobiloud	mobiloud	eq	1.0
mobiloud:mobiloud	mobiloud	eq	1.2.4
mobiloud:mobiloud	mobiloud	eq	1.2.5
mobiloud:mobiloud	mobiloud	eq	1.2.6
mobiloud:mobiloud	mobiloud	eq	1.2.7
mobiloud:mobiloud	mobiloud	eq	1.3
mobiloud:mobiloud	mobiloud	eq	1.3.6
mobiloud:mobiloud	mobiloud	eq	1.3.7
mobiloud:mobiloud	mobiloud	eq	1.3.8