WordPress Media File Renamer插件存在HTML注入漏
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | WordPress Media File Renamer 1.7.0 Cross Site Scripting | 25 Feb 201400:00 | – | packetstorm |
![]() | CVE-2014-2040 | 3 Mar 201418:00 | – | cvelist |
![]() | CVE-2014-2040 | 3 Mar 201418:55 | – | nvd |
![]() | WordPress Media File Renamer Plugin <= 1.7.0 - Multiple XSS | 19 Feb 201400:00 | – | patchstack |
![]() | Media File Renamer <= 1.7.0 - Stored Cross-Site Scripting (XSS) | 31 Jan 201400:00 | – | wpvulndb |
![]() | Cross site scripting | 3 Mar 201418:55 | – | prion |
![]() | CVE-2014-2040 | 3 Mar 201418:55 | – | cve |
![]() | Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 5 May 201400:00 | – | securityvulns |
If a user with permission to add media or edit media uploads a file with "<script>alert(1)</script>" as the title they can XSS the site admin user.
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo