WordPress ZeenShare Plugin <= 1.0.1 - XSS

2014-06-2300:00:00

rajal Kulkarni

patchstack.com

0.001 Low

EPSS

Percentile

49.8%

Because of this vulnerability in redirect_to_zeenshare.php, attackers can inject arbitrary web script or HTML via the “zs_sid” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
zeensharele1.0.1

CPE	Name	Operator	Version
	zeenshare	le	1.0.1

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4606

0.001 Low

EPSS

Percentile

49.8%

Related for PATCHSTACK:2AE3BA3D33F28B66C0CBD0A594CF72C6