Cross-Site Scripting Vulnerability in InstaSqueeze Plugin for WordPress
CVE-2014-9176

Currently unrated

Key Information:

Vendor

Wordpress
Status
Sexy Squeeze Pages
Vendor
CVE Published:
2 December 2014

What is CVE-2014-9176?

The InstaSqueeze Sexy Squeeze Pages plugin for WordPress contains a cross-site scripting vulnerability that can be exploited by attackers. By manipulating the 'id' parameter to 'lp/index.php', attackers can inject arbitrary web script or HTML into the site, compromising the security of affected WordPress installations. This flaw can lead to various malicious activities, including data theft, session hijacking, and redirection to malicious sites, posing significant risks to website administrators and users.

References

http://h4x0resec.blogspot.com/2014/11/wordpress-sexy-sque...
x_refsource_MISC
http://packetstormsecurity.com/files/129285/WordPress-Sex...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/98986
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.