CVE-2014-8751 in goYWP WebPress
Summary
Multiple cross-site scripting (XSS) vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the (1) search_param parameter to search.php or (2) name, (3) address, or (4) comment parameter to forms.php.
Reservation
10/13/2014
Disclosure
12/16/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 73255 | goYWP WebPress search.php cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2014-8751 |