Cross-Site Scripting Vulnerability in Polylang Plugin for WordPress
CVE-2014-4855

Currently unrated

Key Information:

Vendor

Wordpress
Status
Polylang
Vendor
CVE Published:
10 July 2014

What is CVE-2014-4855?

The Polylang plugin for WordPress is susceptible to a cross-site scripting (XSS) vulnerability that enables remote attackers to inject arbitrary web scripts or HTML into user descriptions. This flaw can lead to a variety of attacks, including the theft of sensitive information and manipulation of web sessions. Users of Polylang versions prior to 1.5.2 are urged to update their installation promptly to mitigate the risk associated with this vulnerability. For further details, consult the extensive resources provided by the WordPress plugin repository and third-party advisories.

References

http://wordpress.org/plugins/polylang/changelog
x_refsource_CONFIRM
http://secunia.com/advisories/59357
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.