CVE-2014-100016

Currently unrated

Key Information:

Vendor
Wordpress
Status
Photocrati
Vendor
CVE Published:
13 January 2015

Summary

Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id parameter.

References

http://secunia.com/advisories/56690
third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/102717
vdb-entryx_refsource_OSVDB
http://packetstormsecurity.com/files/124986/WordPress-Pho...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.