Lucene search
MitreCVELIST:CVE-2014-9398HistoryDec 31, 2014 - 9:00 p.m.
CVE-2014-9398
2014-12-3121:00:00
mitre
www.cve.org
3
Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the mashtlb_twitter_username parameter in the twitter-liveblog.php page to wp-admin/options-general.php.
Related
packetstorm
packetstorm
WordPress Twitter LiveBlog 1.1.2 CSRF / XSS
2014-12-18 00:00:00
cve
cve
CVE-2014-9398
2014-12-31 21:59:11
nvd
nvd
CVE-2014-9398
2014-12-31 21:59:11
wpvulndb
wpvulndb
Twitter Liveblog <= 1.1.2 - Multiple CSRF
2014-12-18 00:00:00
patchstack
patchstack
WordPress Twitter LiveBlog Plugin <= 1.1.2 - CSRF and XSS
2014-12-17 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-12-31 21:59:00