⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-4596

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) msg or (2) act parameter.

Vendors

Snapapp Project

Affected products

Snapapp

References

codevigilant.com
www.securityfocus.com