Lucene search
MitreCVELIST:CVE-2014-4527HistoryJul 02, 2014 - 6:00 p.m.
CVE-2014-4527
2014-07-0218:00:00
mitre
www.cve.org
Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) FormID or (2) AdministratorID parameter.
References
codevigilant.com/disclosure/wp-plugin-envialosimple-email-marketing-y-newsletters-gratis-a3-cross-site-scripting-xss
plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=843064%40envialosimple-email-marketing-y-newsletters-gratis&old=839677%40envialosimple-email-marketing-y-newsletters-gratis&sfp_email=&sfph_mail=
Related
patchstack
patchstack
WordPress Email Marketing and Newsletters Plugin <= 1.97 - Multiple XSS
2014-06-23 00:00:00
prion
prion
Cross site scripting
2014-07-02 18:55:00
nvd
nvd
CVE-2014-4527
2014-07-02 18:55:08
cve
cve
CVE-2014-4527
2014-07-02 18:55:08
openvas
openvas
WordPress EnvialoSimple Multiple Cross Site Scripting Vulnerabilities
2014-08-26 00:00:00