PT-2014-6007 · WordPress · Wordpress Responsive Preview
CVE-2014-4594
·
Publicado
2014-07-02
·
Atualizado
2015-08-28
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
WordPress Responsive Preview plugin version 1.1 and earlier
Description
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the
url parameter in the index.php file.Recommendations
For WordPress Responsive Preview plugin versions prior to 1.2, update to version 1.2 or later to resolve the issue.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wordpress Responsive Preview