CVE-2014-4537

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in inpage.tpl.php in de Keyword Strategy Internal Links plugin 2.0 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) sorteer-, (2) zoek- of (3) dir-parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) sort, (2) search, or (3) dir parameter.

Vendors

Keyword Strategy Internal Links Project

Affected products

Keyword Strategy Internal Links

References

codevigilant.com