CVE-2014-4524

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Easy Post Types
Vendor
CVE Published:
2 July 2014

Summary

Cross-site scripting (XSS) vulnerability in classes/custom-image/media.php in the WP Easy Post Types plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ref parameter.

References

http://wordpress.org/plugins/easy-post-types/changelog
x_refsource_CONFIRM
http://codevigilant.com/disclosure/wp-plugin-easy-post-ty...
x_refsource_MISC
https://plugins.trac.wordpress.org/changeset?sfp_email=&s...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.