CVE-2014-4538 Malware Finder <= 1.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in process.php in the Malware Finder plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| malware finder plugin project malware finder | <= 1.1 | No fix listed |
| wordpress malware-finder(WordPress) | <= 1.1 | No fix listed |
References
- codevigilant.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org