Lucene search
Claudio VivianiPATCHSTACK:67D2BB861F517C57FEBE82DA77D8C8F7HistoryNov 05, 2014 - 12:00 a.m.
WordPress Compfight Plugin <= 1.4 - XSS
2014-11-0500:00:00
Claudio Viviani
patchstack.com
2
0.001 Low
EPSS
Percentile
38.5%
This vulnerability is in the compfight-search.php. It allows authenticated users to inject arbitrary web script or HTML via the “search-value” parameter.
Solution
Update the plugin.
Related
nvd
nvd
CVE-2014-8622
2014-11-05 23:55:02
prion
prion
Cross site scripting
2014-11-05 23:55:00
cvelist
cvelist
CVE-2014-8622
2022-10-03 16:20:37
cve
cve
CVE-2014-8622
2022-10-03 16:20:37
wpvulndb
wpvulndb
Compfight < 1.5 Cross-Site Scripting (XSS)
2014-09-19 12:12:56