Lucene search

K
nvd[email protected]NVD:CVE-2014-8364
HistoryOct 20, 2014 - 5:55 p.m.

CVE-2014-8364

2014-10-2017:55:06
CWE-79
web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.9%

Cross-site scripting (XSS) vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ss_id parameter.

Affected configurations

Nvd
Node
tim_rohrerwordpress_spreadsheet_pluginMatch0.62wordpress
VendorProductVersionCPE
tim_rohrerwordpress_spreadsheet_plugin0.62cpe:2.3:a:tim_rohrer:wordpress_spreadsheet_plugin:0.62:*:*:*:*:wordpress:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

60.9%