Lucene search
Ashiyane Digital Security TeamPATCHSTACK:C20C2CCA74D505F742AC98A3DE2AAB0FHistoryJul 10, 2014 - 12:00 a.m.
WordPress Blogstand Banner Plugin <= 1.0 - XSS
2014-07-1000:00:00
Ashiyane Digital Security Team
patchstack.com
6
0.002 Low
EPSS
Percentile
61.1%
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the “bs_blog_id” parameter to wp-admin/options-general.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| blogstand banner | le | 1.0 |
Related
nvd
nvd
CVE-2014-4848
2014-07-10 16:55:05
cvelist
cvelist
CVE-2014-4848
2014-07-10 16:00:00
cve
cve
CVE-2014-4848
2014-07-10 16:55:05
wpvulndb
wpvulndb
Blogst& Smart Banner 1.0 - blogst&-banner.php bs_blog_id Parameter XSS
2014-08-01 10:59:16
prion
prion
Cross site scripting
2014-07-10 16:55:00