NVD

Id
35223  
Name
CVE-2014-7956  
Description
Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-15  
Modified Date
2015-02-11  
Seq
2014-7956  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180409 35223 CVE-2014-7956 http://packetstormsecurity.com/files/129890/WordPress-Pods-2.4.3-CSRF-Cross-Site-Scripting.html  View
180410 35223 CVE-2014-7956 20150112 Wordpress plugin Pods <= 2.4.3 XSS and CSRF vulnerabilities  View
180411 35223 CVE-2014-7956 20150110 Wordpress plugin Pods <= 2.4.3 XSS and CSRF vulnerabilities  View
180412 35223 CVE-2014-7956 71995  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18806 JVNDB-2014-007681 WordPress 用 Pods プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Pods プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-7956 75249 CVE-2014-7956 35223 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007681.html 2014-12-30 2015-01-19 View