CVE-2014-4517

MEDIUM · 4.3 CVSS Gepubliceerd: 21-10-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in getNetworkSites.php in de CBI Referral Manager plugin 1.2.1 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de searchString parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter.

Vendors

Cbi Referral Manager Project

Affected products

Cbi Referral Manager

References

codevigilant.com