CVE-2014-4528

Multiple cross-site scripting (XSS) vulnerabilities in admin/swarm-settings.php in the Bugs Go Viral : Facebook Promotion Generator (fbpromotions) plugin 1.3.4 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) promo_type, (2) fb_edit_action, or (3) promo_id parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:fbpromotions_project:fbpromotions:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 02:10

Type Values Removed Values Added
References () http://codevigilant.com/disclosure/wp-plugin-fbpromotions-a3-cross-site-scripting-xss - Exploit () http://codevigilant.com/disclosure/wp-plugin-fbpromotions-a3-cross-site-scripting-xss - Exploit

Information

Published : 2014-07-01 14:55

Updated : 2025-04-12 10:46


NVD link : CVE-2014-4528

Mitre link : CVE-2014-4528

CVE.ORG link : CVE-2014-4528


JSON object : View

Products Affected

fbpromotions_project

  • fbpromotions
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')