CVE-2014-5202

2014-08-1223:00:00

mitre

www.cve.org

cross-site scripting

compfight plugin

wordpress

remote authenticated users

search-value parameter

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter.

References

downloads.wordpress.org/plugin/compfight.1.5.zip

packetstormsecurity.com/files/127430/WordPress-Compfight-1.4-Cross-Site-Scripting.html

wordpress.org/plugins/compfight/changelog/