CVE-2014-10012

MEDIUM 4.3 CVSS 2.0

Published: January 13, 2015
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.

Affected products and versions

n/a n/a — Versions not specified
strategy11 awp_classifieds — Version 3.3.1

References

packetstormsecurity.com http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/98588
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References