Lucene search

K
cvelistMitreCVELIST:CVE-2014-9444
HistoryJan 02, 2015 - 8:00 p.m.

CVE-2014-9444

2015-01-0220:00:00
mitre
www.cve.org
2
wordpress
frontend uploader
cross-site scripting

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

69.1%

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][name] parameter to the default URI.

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

69.1%