Multiple XSS Vulnerabilities in WooCommerce SagePay Direct Payment Gateway Plugin
CVE-2014-4549

Currently unrated

Key Information:

Vendor

Wordpress
Status
WooCommerce Sagepay Direct Payment Gateway
Vendor
CVE Published:
2 July 2014

What is CVE-2014-4549?

The WooCommerce SagePay Direct Payment Gateway plugin contains vulnerabilities that allow remote attackers to exploit insufficient input validation, enabling them to inject arbitrary web scripts or HTML through the MD and PARes parameters. Successful exploitation could lead to malicious scripts executing in users' browsers, potentially compromising sensitive information and disrupting website functionality.

References

http://wordpress.org/plugins/sagepay-direct-for-woocommer...
x_refsource_CONFIRM
http://codevigilant.com/disclosure/wp-plugin-sagepay-dire...
x_refsource_MISC
http://www.securityfocus.com/bid/65355
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.