CVE-2014-125109: BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting
A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bwsaddmenurender of the file bwsmenu/bwsmenu.php. The manipulation of the argument bwsmnformemail leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 2.28 is able to address this issue. The name of the patch is d2ede580474665af56ff262a05783fbabe4529b8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248956.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-125109?
CVE-2014-125109 has been classified as a problematic vulnerability that allows for cross site scripting impacts.
How do I fix CVE-2014-125109?
To address CVE-2014-125109, it is recommended to update the BestWebSoft Portfolio Plugin to version 2.28 or above.
Which version of the BestWebSoft Portfolio Plugin is affected by CVE-2014-125109?
All versions of the BestWebSoft Portfolio Plugin up to and including 2.27 are affected by CVE-2014-125109.
What type of vulnerability is CVE-2014-125109?
CVE-2014-125109 is a cross site scripting vulnerability that exploits the bws_add_menu_render function.
Where in the code is CVE-2014-125109 found?
CVE-2014-125109 is found in the file bws_menu/bws_menu.php under the function bws_add_menu_render.