CVE-2014-9443: XSS
Published Jan 2, 2015
·Updated
Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
Relevanssi Relevanssi WordPress=3.3.7.1
Remediation
Patch Available
Event History
Jan 2, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9443?
CVE-2014-9443 has been classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2014-9443?
To fix CVE-2014-9443, update the Relevanssi plugin to version 3.3.8 or higher.
3
What vulnerabilities does CVE-2014-9443 expose website users to?
CVE-2014-9443 exposes website users to the risk of arbitrary web script or HTML injection.
4
Who is affected by CVE-2014-9443?
CVE-2014-9443 affects users of the Relevanssi plugin for WordPress versions prior to 3.3.8.
5
What is the impact of CVE-2014-9443 on website security?
The impact of CVE-2014-9443 on website security is the potential exploitation by remote attackers, compromising user data and site integrity.