CVE-2014-4545 Pro Quoter Plugin <= 1.0 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) leftorright or (2) author parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress proquoter(WordPress) | <= 1.0 | No fix listed |
| pro quoter plugin project pro quoter | <= 1.0 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- codevigilant.com exploit
- 68318 exploit vdb-entry