VulnerabilityModified
CVE-2014-100026
Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
MEDIUM 4.3EPSS 1.95%
Does this matter?
Lower severity and a low EPSS score (1.95%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 1.95% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- april\'s super functions pack project/april\'s super functions pack
- Source
- cve@mitre.org
References
- http://osvdb.org/101807
- http://secunia.com/advisories/55576
- http://www.securityfocus.com/bid/64699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90172
- https://wordpress.org/plugins/aprils-super-functions-pack/changelog/Patch
- http://osvdb.org/101807
- http://secunia.com/advisories/55576
- http://www.securityfocus.com/bid/64699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90172
- https://wordpress.org/plugins/aprils-super-functions-pack/changelog/Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.