Cross-Site Scripting Vulnerability in Swipe Checkout for Jigoshop Plugin
CVE-2014-4557

Currently unrated

Key Information:

Vendor

Wordpress
Status
Swipe Hq Checkout For Jigoshop
Vendor
CVE Published:
2 July 2014

What is CVE-2014-4557?

A cross-site scripting vulnerability exists in the Swipe Checkout for Jigoshop plugin, specifically in the 'test-plugin.php' file. This flaw allows remote attackers to inject arbitrary web scripts or HTML via the 'api_url' parameter. If exploited, this vulnerability can lead to unauthorized actions on behalf of a user or extraction of sensitive data, jeopardizing user security and site integrity.

References

http://codevigilant.com/disclosure/wp-plugin-swipe-hq-che...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.