Lucene search
Anant ShrivastavaPATCHSTACK:84F837E340F7903414A4E21AD7E4D32AHistoryJun 23, 2014 - 12:00 a.m.
WordPress XEN Carousel Plugin <= 0.12.2 - Multiple XSS
2014-06-2300:00:00
Anant Shrivastava
patchstack.com
5
0.001 Low
EPSS
Percentile
49.8%
Because of these multiple vulnerabilities in xencarousel-admin.js.php, the attackers can inject arbitrary web script or HTML via the “ajaxpath” or “path” parameter.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xen carousel | le | 0.12.2 |
Related
cve
cve
CVE-2014-4602
2014-07-01 14:55:05
wpvulndb
wpvulndb
cvelist
cvelist
CVE-2014-4602
2014-07-01 14:00:00
prion
prion
Cross site scripting
2014-07-01 14:55:00
nvd
nvd
CVE-2014-4602
2014-07-01 14:55:05