XSS Vulnerability in BannerMan Plugin for WordPress
CVE-2014-4845

Currently unrated

Key Information:

Vendor

Wordpress
Status
Bannerman
Vendor
CVE Published:
10 July 2014

What is CVE-2014-4845?

A cross-site scripting (XSS) vulnerability exists in the BannerMan plugin version 0.2.4 for WordPress, which allows attackers to inject arbitrary web scripts or HTML. This can occur through the bannerman_background parameter via the wp-admin/options-general.php interface. Successful exploitation of this vulnerability could enable unauthorized parties to execute malicious scripts in users' browsers, potentially leading to session hijacking or other malicious activities.

References

http://www.securityfocus.com/bid/68278
vdb-entryx_refsource_BID
http://packetstormsecurity.com/files/127289/WordPress-Ban...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.