Lucene search
Manideep KPATCHSTACK:06BB6A91B6FE1FCAF42D2F7F1298EBA8HistoryDec 17, 2014 - 12:00 a.m.
WordPress Twitter LiveBlog Plugin <= 1.1.2 - CSRF and XSS
2014-12-1700:00:00
Manideep K
patchstack.com
6
0.005 Low
EPSS
Percentile
76.2%
Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| twitter liveblog | le | 1.1.2 |
Related
nvd
nvd
CVE-2014-9398
2014-12-31 21:59:11
cve
cve
CVE-2014-9398
2014-12-31 21:59:11
packetstorm
packetstorm
WordPress Twitter LiveBlog 1.1.2 CSRF / XSS
2014-12-18 00:00:00
wpvulndb
wpvulndb
Twitter Liveblog <= 1.1.2 - Multiple CSRF
2014-12-18 00:00:00
cvelist
cvelist
CVE-2014-9398
2014-12-31 21:00:00
prion
prion
Cross site request forgery (csrf)
2014-12-31 21:59:00