CVE-2014-9094

2014-11-2615:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.259 Low

EPSS

Percentile

96.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) swfloc or (2) designrand parameter.