Cross-Site Scripting Vulnerability in Memphis Documents Library Plugin for WordPress
CVE-2014-10385

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Memphis Documents Library
Vendor
CVE Published:
22 August 2019

What is CVE-2014-10385?

The Memphis Documents Library plugin for WordPress, prior to version 3.0, is susceptible to a cross-site scripting (XSS) vulnerability that arises from improper handling of input received via the $_REQUEST variable. Attackers can exploit this weakness to inject malicious scripts into web pages viewed by other users. This can lead to account hijacking, unauthorized actions, or the exposure of sensitive information. Users are advised to update to the latest version to mitigate potential security risks.

References

https://wordpress.org/plugins/memphis-documents-library/#...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.