Lucene search
MitreCVELIST:CVE-2014-4549HistoryJul 02, 2014 - 8:00 p.m.
CVE-2014-4549
2014-07-0220:00:00
mitre
www.cve.org
Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MD or (2) PARes parameter.
References
codevigilant.com/disclosure/wp-plugin-sagepay-direct-for-woocommerce-payment-gateway-a3-cross-site-scripting-xss
wordpress.org/plugins/sagepay-direct-for-woocommerce-payment-gateway/changelog
www.securityfocus.com/bid/65355
github.com/wp-plugins/sagepay-direct-for-woocommerce-payment-gateway/commit/9c6cf939c6c25377c285439b92ef2bb5ebda9db6
Related
patchstack
patchstack
WordPress SagePay Direct Payment Gateway Plugin <= 0.1.6.7 - Multiple XSS
2014-06-23 00:00:00
nvd
nvd
CVE-2014-4549
2014-07-02 20:55:06
cve
cve
CVE-2014-4549
2014-07-02 20:55:06
wpvulndb
wpvulndb
prion
prion
Cross site scripting
2014-07-02 20:55:00
openvas
openvas