CVE-2014-100026 - Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter

Published Jan 13, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.95%

Description

Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://osvdb.org/101807
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/55576
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/64699
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/90172
vdb-entryx_refsource_XF
https://wordpress.org/plugins/aprils-super-functions-pack/changelog/
x_refsource_CONFIRMPatch

Link	Providers	Tags
http://osvdb.org/101807		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/55576		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/64699		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/90172		vdb-entryx_refsource_XF
https://wordpress.org/plugins/aprils-super-functions-pack/changelog/		x_refsource_CONFIRMPatch