CVE-2014-4594

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) -kwetsbaarheid in index.php in de WordPress Responsive Preview-plug-in vóór 1.2 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de URL-parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Vendors

Wordpress Responsive Preview Project

Affected products

Wordpress Responsive Preview

References

codevigilant.com
wordpress.org
www.securityfocus.com