Lucene search
N/APATCHSTACK:9BEFD63809E20B230C5F4A6D4A0D9164HistoryAug 12, 2014 - 12:00 a.m.
WordPress Improved User Search in Backend Plugin <= 1.2.4 - CSRF
2014-08-1200:00:00
N/A
patchstack.com
6
EPSS
0.002
Percentile
60.8%
Because of this vulnerability in improved-user-search-in-backend.php, the attackers can hijack the authentication of administrators for requests that insert XSS sequences.
Solution
Update the plugin.
Related
cvelist
cvelist
CVE-2014-5196
2014-08-12 20:00:00
nvd
nvd
CVE-2014-5196
2014-08-12 20:55:03
CVE-2014-5157
2014-08-13 18:55:04
prion
prion
Cross site request forgery (csrf)
2014-08-12 20:55:00
Design/Logic Flaw
2014-08-13 18:55:00
wpvulndb
wpvulndb
Improved User Search in Backend < 1.2.6 - CSRF & XSS
2014-09-19 00:00:00
cve
cve
CVE-2014-5196
2014-08-12 20:55:03
CVE-2014-5157
2014-08-13 18:55:04