Lucene search
N/APATCHSTACK:7FF36898850A60D33894A96B2EB779D2HistoryNov 26, 2014 - 12:00 a.m.
WordPress Digital Zoom Studio Plugin - XSS
2014-11-2600:00:00
N/A
patchstack.com
7
0.259 Low
EPSS
Percentile
96.7%
Multiple cross-site scripting (XSS) vulnerabilities are in deploy/designer/preview.php. Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the “swfloc” or “designrand” parameter.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| digital zoom studio | le | 1.0 |
Related
cvelist
cvelist
CVE-2014-9094
2014-11-26 15:00:00
wpvulndb
wpvulndb
DZS Video Gallery Plugin - RCE & More
2014-09-27 12:04:59
prion
prion
Cross site scripting
2014-11-26 15:59:00
nvd
nvd
CVE-2014-9094
2014-11-26 15:59:10
patchstack
patchstack
nuclei
nuclei
WordPress DZS-VideoGallery Plugin Cross-Site Scripting
2021-07-11 01:43:01
cve
cve
CVE-2014-9094
2014-11-26 15:59:10
openvas
openvas