Lucene search
MitreCVE-2014-2995HistoryOct 17, 2014 - 10:55 p.m.
CVE-2014-2995
2014-10-1722:55:04
CWE-79
mitre
web.nvd.nist.gov
20
cve-2014-2995
twitget
xss
wordpress
security vulnerability
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.003
Percentile
71.6%
Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitget_consumer_key parameter to wp-admin/options-general.php.
Affected configurations
Node
twitget_projecttwitgetRange≤3.3.1----wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| twitget_project | twitget | * | cpe:2.3:a:twitget_project:twitget:*:-:-:-:-:wordpress:*:* |
Related
wpvulndb
wpvulndb
Twitget 3.3.1 - twitget.php twitget_consumer_key Stored XSS
2014-08-01 10:59:13
cvelist
cvelist
CVE-2014-2995
2014-10-17 22:00:00
prion
prion
Cross site scripting
2014-10-17 22:55:00
patchstack
patchstack
WordPress Twitget Plugin <= 3.3.2 - Multiple XSS
2014-04-24 00:00:00
nvd
nvd
CVE-2014-2995
2014-10-17 22:55:04
exploitdb
exploitdb
WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities
2014-04-14 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.003
Percentile
71.6%
Related for CVE-2014-2995