CVE-2014-5202

Currently unrated

Key Information:

Vendor
Wordpress
Status
Compfight
Vendor
CVE Published:
12 August 2014

Summary

Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter.

References

http://wordpress.org/plugins/compfight/changelog/
x_refsource_CONFIRM
http://packetstormsecurity.com/files/127430/WordPress-Com...
x_refsource_MISC
http://downloads.wordpress.org/plugin/compfight.1.5.zip
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.