CVE-2014-3870 in bib2html
Summary
Cross-site scripting (XSS) vulnerability in the bib2html plugin 0.9.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the styleShortName parameter in an adminStyleAdd action to OSBiB/create/index.php.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/27/2014
Disclosure
05/27/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69827 | bib2html cross site scripting | 79 | Not defined | Not defined | CVE-2014-3870 |