CVE-2014-6315 in Photo Gallery plugin信息

摘要

由 MITRE

Multiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) callback, (2) dir, or (3) extensions parameter in an addImages action to wp-admin/admin-ajax.php.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-09-11

披露

2014-10-10

管理

已接受

条目

VDB-71924

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (NVD)

EPSS

0.02374

KEV

否

活动

非常低

部门

Lawfirm, Police, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-6315
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-6315
CVE Details	https://www.cvedetails.com/cve/CVE-2014-6315/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!