Lucene search

[email protected]CVE-2014-5345

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-5345

2022-10-0316:20:42

CWE-79

[email protected]

web.nvd.nist.gov

cve

2014

5345

cross-site scripting

xss

vulnerability

upgrade.php

disqus comment system

wordpress

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.4%

JSON

Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter.

Affected configurations

NVD

Node

disqusdisqus_comment_systemRange≤2.75wordpress

disqusdisqus_comment_systemMatch2.40wordpress

disqusdisqus_comment_systemMatch2.41wordpress

disqusdisqus_comment_systemMatch2.42wordpress

disqusdisqus_comment_systemMatch2.43wordpress

disqusdisqus_comment_systemMatch2.44wordpress

disqusdisqus_comment_systemMatch2.45wordpress

disqusdisqus_comment_systemMatch2.46wordpress

disqusdisqus_comment_systemMatch2.47wordpress

disqusdisqus_comment_systemMatch2.48wordpress

disqusdisqus_comment_systemMatch2.49wordpress

disqusdisqus_comment_systemMatch2.50wordpress

disqusdisqus_comment_systemMatch2.51wordpress

disqusdisqus_comment_systemMatch2.52wordpress

disqusdisqus_comment_systemMatch2.53wordpress

disqusdisqus_comment_systemMatch2.54wordpress

disqusdisqus_comment_systemMatch2.55wordpress

disqusdisqus_comment_systemMatch2.60wordpress

disqusdisqus_comment_systemMatch2.61wordpress

disqusdisqus_comment_systemMatch2.62wordpress

disqusdisqus_comment_systemMatch2.63wordpress

disqusdisqus_comment_systemMatch2.64wordpress

disqusdisqus_comment_systemMatch2.65wordpress

disqusdisqus_comment_systemMatch2.66wordpress

disqusdisqus_comment_systemMatch2.67wordpress

disqusdisqus_comment_systemMatch2.68wordpress

disqusdisqus_comment_systemMatch2.69wordpress

disqusdisqus_comment_systemMatch2.70wordpress

disqusdisqus_comment_systemMatch2.71wordpress

disqusdisqus_comment_systemMatch2.72wordpress

disqusdisqus_comment_systemMatch2.73wordpress

disqusdisqus_comment_systemMatch2.74wordpress

CPENameOperatorVersion
disqus:disqus_comment_systemdisqus disqus comment systemle2.75
disqus:disqus_comment_systemdisqus disqus comment systemeq2.40
disqus:disqus_comment_systemdisqus disqus comment systemeq2.41
disqus:disqus_comment_systemdisqus disqus comment systemeq2.42
disqus:disqus_comment_systemdisqus disqus comment systemeq2.43
disqus:disqus_comment_systemdisqus disqus comment systemeq2.44
disqus:disqus_comment_systemdisqus disqus comment systemeq2.45
disqus:disqus_comment_systemdisqus disqus comment systemeq2.46
disqus:disqus_comment_systemdisqus disqus comment systemeq2.47
disqus:disqus_comment_systemdisqus disqus comment systemeq2.48

CPE	Name	Operator	Version
disqus:disqus_comment_system	disqus disqus comment system	le	2.75
disqus:disqus_comment_system	disqus disqus comment system	eq	2.40
disqus:disqus_comment_system	disqus disqus comment system	eq	2.41
disqus:disqus_comment_system	disqus disqus comment system	eq	2.42
disqus:disqus_comment_system	disqus disqus comment system	eq	2.43
disqus:disqus_comment_system	disqus disqus comment system	eq	2.44
disqus:disqus_comment_system	disqus disqus comment system	eq	2.45
disqus:disqus_comment_system	disqus disqus comment system	eq	2.46
disqus:disqus_comment_system	disqus disqus comment system	eq	2.47
disqus:disqus_comment_system	disqus disqus comment system	eq	2.48