Lucene search
Larry W. CashdollarPATCHSTACK:1DAABEE3E39D66BC35F9106DA26A5D95HistoryFeb 19, 2014 - 12:00 a.m.
WordPress Media File Renamer Plugin <= 1.7.0 - Multiple XSS
2014-02-1900:00:00
Larry W. Cashdollar
patchstack.com
4
EPSS
0.001
Percentile
40.0%
Because of these vulnerabilities, authenticated users with permissions to add media or edit media can inject arbitrary web script or HTML via unspecified parameters, as demonstrated by the title of an uploaded file.
Solution
Update the plugin.
Related
seebug
seebug
WordPress Media File Renamer插件多个HTML注入漏洞
2014-02-25 00:00:00
cvelist
cvelist
CVE-2014-2040
2014-03-03 18:00:00
packetstorm
packetstorm
WordPress Media File Renamer 1.7.0 Cross Site Scripting
2014-02-25 00:00:00
prion
prion
Cross site scripting
2014-03-03 18:55:00
cve
cve
CVE-2014-2040
2014-03-03 18:55:03
wpvulndb
wpvulndb
Media File Renamer <= 1.7.0 - Stored Cross-Site Scripting (XSS)
2014-01-31 00:00:00
nvd
nvd
CVE-2014-2040
2014-03-03 18:55:03
securityvulns
securityvulns