PT-2014-5961 · Unknown · Keyword Strategy Internal Links

Prajalkulkarni · Publicado 2014-07-02 · Atualizado 2014-07-11 · CVE-2014-4537

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Keyword Strategy Internal Links plugin versions 2.0 and earlier

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the sort, search, or dir parameters.

Recommendations For Keyword Strategy Internal Links plugin versions 2.0 and earlier, update to a version later than 2.0 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-4537

Produtos afetados

Keyword Strategy Internal Links

Referências · 3

• 🔥 http://codevigilant.com/disclosure/wp-plugin-keyword-strategy-internal-links-a3-cross-site-scripting-xss · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4537 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4537 · Nota de Segurança