Lucene search
MitreCVELIST:CVE-2014-9399HistoryDec 31, 2014 - 9:00 p.m.
CVE-2014-9399
2014-12-3121:00:00
mitre
www.cve.org
7
Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the tweetscribe_username parameter in a save action in the tweetscribe.php page to wp-admin/options-general.php.
Related
prion
prion
Cross site request forgery (csrf)
2014-12-31 21:59:00
packetstorm
packetstorm
WordPress TweetScribe 1.1 CSRF / XSS
2014-12-18 00:00:00
cve
cve
CVE-2014-9399
2014-12-31 21:59:12
patchstack
patchstack
WordPress TweetScribe Plugin <= 1.1 - CSRF and XSS
2014-12-17 00:00:00
wpvulndb
wpvulndb
Tweetscribe <= 1.1 - Multiple CSRF
2014-12-18 00:00:00
nvd
nvd
CVE-2014-9399
2014-12-31 21:59:12