NVD

Id
30988  
Name
CVE-2014-2598  
Description
Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-05  
Modified Date
2015-01-06  
Seq
2014-2598  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162923 30988 CVE-2014-2598 http://packetstormsecurity.com/files/126127  View
162924 30988 CVE-2014-2598 20140411 CSRF and stored XSS in Quick Page/Post Redirect Plugin (WordPress plugin)  View
162925 30988 CVE-2014-2598 32867  View
162926 30988 CVE-2014-2598 quickpage-wordpress-cve20142598-csrf(92528)  View
162927 30988 CVE-2014-2598 https://security.dxw.com/advisories/csrf-and-stored-xss-in-quick-pagepost-redirect-plugin/  View
162928 30988 CVE-2014-2598 https://wordpress.org/plugins/quick-pagepost-redirect-plugin/changelog/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18628 JVNDB-2014-007503 WordPress 用 Quick Page/Post Redirect プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 Quick Page/Post Redirect プラグインには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-2598 69885 CVE-2014-2598 30988 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007503.html 2014-04-10 2015-01-08 View