Lucene search
MitreCVELIST:CVE-2014-1888HistoryFeb 28, 2014 - 5:00 p.m.
CVE-2014-1888
2014-02-2817:00:00
mitre
www.cve.org
2
EPSS
0.01
Percentile
83.7%
Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the name field to groups/create/step/group-details. NOTE: this can be exploited without authentication by leveraging CVE-2014-1889.
References
buddypress.org/2014/02/buddypress-1-9-2
osvdb.org/103307
packetstormsecurity.com/files/125212/WordPress-Buddypress-1.9.1-Cross-Site-Scripting.html
secunia.com/advisories/56950
www.securityfocus.com/archive/1/531049/100/0/threaded
www.securityfocus.com/bid/65555
exchange.xforce.ibmcloud.com/vulnerabilities/91175
Related
nvd
nvd
CVE-2014-1888
2014-03-01 00:01:09
CVE-2014-1889
2018-04-10 15:29:00
prion
prion
Cross site scripting
2014-03-01 00:01:00
Information disclosure
2018-04-10 15:29:00
cve
cve
CVE-2014-1888
2014-03-01 00:01:09
CVE-2014-1889
2018-04-10 15:29:00
exploitpack
exploitpack
WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation
2014-02-11 00:00:00
patchstack
patchstack
WordPress Buddypress Plugin 1.9.1 - Privilege Escalation
2014-02-11 00:00:00
WordPress BuddyPress Plugin <= 1.9.1 - XSS
2014-02-07 00:00:00
packetstorm
packetstorm
WordPress Buddypress 1.9.1 Privilege Escalation
2014-02-14 00:00:00
WordPress Buddypress 1.9.1 Cross Site Scripting
2014-02-14 00:00:00
securityvulns
securityvulns
Wordpress plugin Buddypress <= 1.9.1 privilege escalation vulnerability
2014-05-05 00:00:00
Wordpress plugin Buddypress <= 1.9.1 stored xss vulnerability
2014-05-05 00:00:00
wpvulndb
wpvulndb
Buddypress <= 1.9.1 - Crafted bp_new_group_id Cookie Arbitrary Group Manipulation
2014-08-01 10:58:44
Buddypress <= 1.9.1 - Stored Cross-Site Scripting (XSS)
2014-08-01 10:58:44
zdt
zdt
WordPress Buddypress 1.9.1 Privilege Escalation Vulnerability
2014-02-15 00:00:00
WordPress Buddypress 1.9.1 Cross Site Scripting Vulnerability
2014-02-15 00:00:00
cvelist
cvelist
CVE-2014-1889
2018-04-10 15:00:00
seebug
seebug
Wordpress Buddypress Plugin 1.9.1 - Privilege Escalation
2014-07-01 00:00:00
Wordpress Buddypress插件'name'字段HTML注入漏洞
2014-02-18 00:00:00
exploitdb
exploitdb
WordPress Plugin BuddyPress 1.9.1 - Privilege Escalation
2014-02-11 00:00:00