Description

Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-9035

Related Vulnerabilities

Oracle Database Server CVE-2014-0377 Vulnerability (CVE-2014-0377)

MySQL CVE-2018-3143 Vulnerability (CVE-2018-3143)

WordPress Use of Insufficiently Random Values Vulnerability (CVE-2017-17091)

WordPress Plugin LayerSlider Cross-Site Request Forgery (4.6.1)

Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2021-20184)

Severity

Medium

Classification

CVE-2014-9035 CWE-707

Tags

Missing Update Known Vulnerabilities