CVE-2014-4600: XSS
Published Jul 2, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) listname or (2) contact parameter.
Affected Software
2 affected components
Wp Ultimate Email Marketer Project Wp Ultimate Email Marketer<=1.1.0
WordPress WordPress
Event History
Jul 2, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4600?
CVE-2014-4600 is considered a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2014-4600?
To fix CVE-2014-4600, update the WP Ultimate Email Marketer plugin to version 1.1.1 or later.
3
What are the affected versions of the WP Ultimate Email Marketer plugin for CVE-2014-4600?
CVE-2014-4600 affects WP Ultimate Email Marketer plugin version 1.1.0 and earlier.
4
What type of vulnerability is CVE-2014-4600?
CVE-2014-4600 is classified as a cross-site scripting (XSS) vulnerability.
5
Does CVE-2014-4600 affect WordPress installations?
CVE-2014-4600 specifically affects the WP Ultimate Email Marketer plugin used within WordPress.