CVE-2014-3923: XSS

Published May 30, 2014

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to (1) preview.swf, (2) previewskinrouge.swf, (3) previewallchars.swf, or (4) previewskinoverlay.swf in deploy/.

Affected Software

1 affected component

Digitalzoomstudio Video Gallery Wordpress

Event History

May 30, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3923?

The severity of CVE-2014-3923 is considered high due to its potential for remote code execution via cross-site scripting.

How do I fix CVE-2014-3923?

To fix CVE-2014-3923, update the Digital Zoom Studio Video Gallery plugin to the latest version that addresses this vulnerability.

Who is affected by CVE-2014-3923?

Users of the Digital Zoom Studio Video Gallery plugin for WordPress are affected by CVE-2014-3923.

What type of vulnerability is CVE-2014-3923?

CVE-2014-3923 is classified as a cross-site scripting (XSS) vulnerability.

What parameters are involved in CVE-2014-3923?

The parameters involved in CVE-2014-3923 include the logoLink parameter in various preview files.