⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-4554

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter.

Vendors

Ss Downloads Project

Affected products

Ss Downloads

References

codevigilant.com
wordpress.org
www.securityfocus.com