Lucene search
PRIOn knowledge basePRION:CVE-2014-4527HistoryJul 02, 2014 - 6:55 p.m.
Cross site scripting
2014-07-0218:55:00
PRIOn knowledge base
www.prio-n.com
3
Multiple cross-site scripting (XSS) vulnerabilities in paginas/vista-previa-form.php in the EnvialoSimple: Email Marketing and Newsletters (envialosimple-email-marketing-y-newsletters-gratis) plugin before 1.98 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) FormID or (2) AdministratorID parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| email_marketing_y_newsletters | le | 1.97 |
References
codevigilant.com/disclosure/wp-plugin-envialosimple-email-marketing-y-newsletters-gratis-a3-cross-site-scripting-xss
plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=843064%40envialosimple-email-marketing-y-newsletters-gratis&old=839677%40envialosimple-email-marketing-y-newsletters-gratis&sfp_email=&sfph_mail=
Related
patchstack
patchstack
WordPress Email Marketing and Newsletters Plugin <= 1.97 - Multiple XSS
2014-06-23 00:00:00
openvas
openvas
WordPress EnvialoSimple Multiple Cross Site Scripting Vulnerabilities
2014-08-26 00:00:00
cvelist
cvelist
CVE-2014-4527
2014-07-02 18:00:00
cve
cve
CVE-2014-4527
2014-07-02 18:55:08
nvd
nvd
CVE-2014-4527
2014-07-02 18:55:08