CVE-2014-8622

Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 for WordPress

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter in the compfight-search.php file. This could potentially lead to unauthorized actions on the website.

Recommendations For Compfight plugin version 1.4, consider disabling the search-value parameter in the compfight-search.php file until a patch is available. Restrict access to the compfight-search.php file to minimize the risk of exploitation. Avoid using the search-value parameter in the affected API endpoint until the issue is resolved.