Lucene search
High-Tech Bridge Security ResearchPATCHSTACK:1FAA39CB571D86414FD89F6720F0F47CHistoryJan 07, 2015 - 12:00 a.m.
WordPress Simple Security Plugin <= 1.1.5 - Multiple XSS
2015-01-0700:00:00
High-Tech Bridge Security Research
patchstack.com
9
EPSS
0.002
Percentile
52.0%
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the (1) “datefilter” parameter in the access_log page to wp-admin/users.php.
Solution
Update the plugin.
Related
securityvulns
securityvulns
Two XSS vulnerabilities in Simple Security WordPress Plugin
2015-01-19 00:00:00
htbridge
htbridge
Two XSS vulnerabilities in Simple Security WordPress Plugin
2014-12-17 00:00:00
nvd
nvd
CVE-2014-9570
2015-01-15 15:59:20
zdt
zdt
WordPress Simple Security 1.1.5 Cross Site Scripting Vulnerability
2015-01-15 00:00:00
packetstorm
packetstorm
WordPress Simple Security 1.1.5 Cross Site Scripting
2015-01-14 00:00:00
prion
prion
Cross site scripting
2015-01-15 15:59:00
cvelist
cvelist
CVE-2014-9570
2015-01-15 15:00:00
wpvulndb
wpvulndb
Simple Security <= 1.1.5 - 2 x Cross-Site Scripting (XSS)
2015-01-14 15:31:31
cve
cve
CVE-2014-9570
2015-01-15 15:59:20