Lucene search
+L

7 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•45 views

Import Legacy Media <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4535 info: name: Import Legacy Media = 0.1 - Cross-Site...

6.1CVSS6.3AI score0.03983EPSS
SaveExploits2References4
VulnCheck KEV
VulnCheck KEV
•added 2024/09/19 12:00 a.m.•13 views

VulnCheck KEV: CVE-2014-4535

Cross-site scripting XSS vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

6.1CVSS5.9AI score0.03983EPSS
SaveIn wildExploits2References3
CNVD
CNVD
•added 2020/01/02 12:00 a.m.•8 views

WordPress Import Legacy Media Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Import Legacy Media is a media file import plugin used in it. A cross-site scripting vulnerability exists in WordPress Import Legacy...

6.1CVSS6.2AI score0.03983EPSS
SaveExploits2References1
NVD
NVD
•added 2019/12/27 8:15 p.m.•32 views

CVE-2014-4535

Cross-site scripting XSS vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

6.1CVSS6.2AI score0.03983EPSS
SaveExploits2References1
Prion
Prion
•added 2019/12/27 8:15 p.m.•28 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

4.3CVSS6.3AI score0.03983EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2019/12/27 7:28 p.m.•190 views

CVE-2014-4535

The Import Legacy Media plugin for WordPress (version 0.1 and earlier ) is vulnerable to a Cross-site scripting (XSS) vulnerability. The root cause is a lack of proper validation of client-side data, specifically allowing remote attackers to inject arbitrary web scripts or HTML via the filename p...

6.1CVSS6.1AI score0.03983EPSS
SaveIn wildExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/27 12:00 a.m.•3 views

CVE-2014-4535: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php...

6.1CVSS6.4AI score0.03983EPSS
SaveExploits2References2
Rows per page
Query Builder