Description

Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-9032

Related Vulnerabilities

WordPress Plugin Project Status Cross-Site Scripting (1.6)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.8.8)

WordPress Plugin Mapplic Lite Server-Side Request Forgery (1.0)

WordPress Plugin Redirection Cross-Site Request Forgery (1.1.4)

WordPress Plugin Autoship Cloud PHP Object Injection (1.0.13)

Severity

Medium

Classification

CVE-2014-9032 CWE-707

Tags

Missing Update Known Vulnerabilities