Cross-Site Scripting Vulnerability in Relevanssi Plugin for WordPress
CVE-2014-9443

Currently unrated

Key Information:

Vendor
Wordpress
Status
Relevanssi
Vendor
CVE Published:
2 January 2015

Summary

The Relevanssi plugin for WordPress was found to contain a cross-site scripting (XSS) vulnerability, which could allow remote attackers to inject arbitrary web scripts or HTML through unspecified vectors. This could lead to unauthorized actions executed in the web users' browsers, potentially compromising sensitive information or account access. It is recommended that users upgrade to the latest version to mitigate these risks.

References

https://wordpress.org/plugins/relevanssi/changelog/
x_refsource_CONFIRM
http://secunia.com/advisories/61744
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.