Lucene search
MitreCVE-2014-9444HistoryJan 02, 2015 - 8:59 p.m.
CVE-2014-9444
2015-01-0220:59:02
CWE-79
mitre
web.nvd.nist.gov
25
cve-2014-9444
cross-site scripting
xss
frontend uploader
wordpress
nvd
security vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
69.1%
Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][name] parameter to the default URI.
Affected configurations
Node
frontend_uploader_projectfrontend_uploaderMatch0.9.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| frontend_uploader_project | frontend_uploader | 0.9.2 | cpe:2.3:a:frontend_uploader_project:frontend_uploader:0.9.2:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2015-01-02 20:59:00
patchstack
patchstack
WordPress Frontend Uploader Plugin <= 0.9.2 - XSS
2015-01-02 00:00:00
wpvulndb
wpvulndb
Frontend Uploader <= 0.9.2 - Unauthenticated Cross-Site Scripting (XSS)
2014-12-27 00:00:00
nuclei
nuclei
Frontend Uploader <= 0.9.2 - Cross-Site Scripting
2021-09-13 22:33:49
wpexploit
wpexploit
Frontend Uploader <= 0.9.2 - Unauthenticated Cross-Site Scripting (XSS)
2014-12-27 00:00:00
cvelist
cvelist
CVE-2014-9444
2015-01-02 20:00:00
nvd
nvd
CVE-2014-9444
2015-01-02 20:59:02
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.003
Percentile
69.1%
Related for CVE-2014-9444