CVE-2014-4594 WordPress Responsive Preview <= 1.1 - Reflected Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wp-responsive-preview(WordPress) | < 1.2 | 1.2 |
| wordpress responsive preview project wordpress responsive preview | <= 1.1 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- codevigilant.com exploit
- wordpress.org patch
- 68408 exploit vdb-entry