CVE-2014-7152

MEDIUM · 4.3 CVSS Gepubliceerd: 26-09-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-ajax.php.

Vendors

Mailchimp

Affected products

Easy Mailchimp Forms Plugin

References

research.g0blin.co.uk
wordpress.org