Skip to content

CVE-2014-5345 Disqus Comment System < 2.76 - Reflected Cross-Site Scripting

MediumCVSS 4.3 EPSS 6.1% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter.

Affected products

ProductAffected versionsFixed in
disqus comment system <= 2.75 No fix listed
disqus comment system = 2.40 No fix listed
disqus comment system = 2.41 No fix listed
disqus comment system = 2.42 No fix listed
disqus comment system = 2.43 No fix listed
disqus comment system = 2.44 No fix listed
disqus comment system = 2.45 No fix listed
disqus comment system = 2.46 No fix listed
disqus comment system = 2.47 No fix listed
disqus comment system = 2.48 No fix listed
disqus comment system = 2.49 No fix listed
disqus comment system = 2.50 No fix listed
disqus comment system = 2.51 No fix listed
disqus comment system = 2.52 No fix listed
disqus comment system = 2.53 No fix listed
disqus comment system = 2.54 No fix listed
disqus comment system = 2.55 No fix listed
disqus comment system = 2.60 No fix listed
disqus comment system = 2.61 No fix listed
disqus comment system = 2.62 No fix listed
disqus comment system = 2.63 No fix listed
disqus comment system = 2.64 No fix listed
disqus comment system = 2.65 No fix listed
disqus comment system = 2.66 No fix listed
disqus comment system = 2.67 No fix listed
Show 8 more
ProductAffected versionsFixed in
disqus comment system = 2.68 No fix listed
disqus comment system = 2.69 No fix listed
disqus comment system = 2.70 No fix listed
disqus comment system = 2.71 No fix listed
disqus comment system = 2.72 No fix listed
disqus comment system = 2.73 No fix listed
disqus comment system = 2.74 No fix listed
wordpress disqus-comment-system(WordPress) < 2.76 2.76

References