CVE-2014-6312

2014-10-1514:55:08

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

High

EPSS

0.005

Percentile

77.4%

JSON

Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the custom_style_afo parameter on the login_widget_afo page to wp-admin/options-general.php.

Affected configurations

Nvd

Node

login_widget_with_shortcode_projectlogin_widget_with_shortcodeRange≤3.1.1wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch1.0.1wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch2.0.1wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch2.0.2wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch2.1.3wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch2.2.3wordpress

login_widget_with_shortcode_projectlogin_widget_with_shortcodeMatch2.2.4wordpress

VendorProductVersionCPE
login_widget_with_shortcode_projectlogin_widget_with_shortcode*cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:*:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode1.0.1cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:1.0.1:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode2.0.1cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.0.1:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode2.0.2cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.0.2:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode2.1.3cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.1.3:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode2.2.3cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.2.3:*:*:*:*:wordpress:*:*
login_widget_with_shortcode_projectlogin_widget_with_shortcode2.2.4cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.2.4:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
login_widget_with_shortcode_project	login_widget_with_shortcode	*	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode::::::wordpress::*
login_widget_with_shortcode_project	login_widget_with_shortcode	1.0.1	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:1.0.1:::::wordpress::
login_widget_with_shortcode_project	login_widget_with_shortcode	2.0.1	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.0.1:::::wordpress::
login_widget_with_shortcode_project	login_widget_with_shortcode	2.0.2	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.0.2:::::wordpress::
login_widget_with_shortcode_project	login_widget_with_shortcode	2.1.3	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.1.3:::::wordpress::
login_widget_with_shortcode_project	login_widget_with_shortcode	2.2.3	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.2.3:::::wordpress::
login_widget_with_shortcode_project	login_widget_with_shortcode	2.2.4	cpe:2.3:a:login_widget_with_shortcode_project:login_widget_with_shortcode:2.2.4:::::wordpress::