CVE-2014-4572

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-4572
Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://codevigilant.com/disclosure/wp-plugin-votecount-for-balatarin-a3-cross-site-scripting-xss Exploit
http://codevigilant.com/disclosure/wp-plugin-votecount-for-balatarin-a3-cross-site-scripting-xss Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:votecount_for_balatarin_project:votecount_for_balatarin:*:-:-:*:-:wordpress:*:*
History

21 Nov 2024, 02:10

Type Values Removed Values Added
References () http://codevigilant.com/disclosure/wp-plugin-votecount-for-balatarin-a3-cross-site-scripting-xss - Exploit () http://codevigilant.com/disclosure/wp-plugin-votecount-for-balatarin-a3-cross-site-scripting-xss - Exploit
Information

Published : 2014-07-02 18:55

Updated : 2024-11-21 02:10

NVD link : CVE-2014-4572

Mitre link : CVE-2014-4572

CVE.ORG link : CVE-2014-4572

JSON object : View

Products Affected

votecount_for_balatarin_project

  • votecount_for_balatarin
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')