CVE-2014-2333
LOW
2.6
CVSS 2.0
Description
Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information.
Affected WordPress components
-
lazyest-gallery Plugin · lazyest-galleryVersions not specified; Version 1.1.17.4; Version 1.1.10; Version 1.1.19; Version 1.1.11; Version 1.1.3.3; Up to and including 1.1.20; Version 1.1; Version 1.1.1; Version 1.1.1.1; Version 1.1.3.2; Version 1.1.2.1; Version 1.1.3; Version 1.1.12; Version 1.1.19.1; Version 1.1.7; Version 1.1.8; Version 1.1.13; Version 1.1.14; Version 1.1.15; Version 1.1.6; Version 1.1.3.1; Version 1.1.8.1; Version 1.1.16; Version 1.1.9; Version 1.1.17.1; Version 1.1.4; Version 1.1.5; Version 1.1.7.1; Version 1.1.17.2; Version 1.1.18; Version 1.1.9.1; Version 1.1.10.1View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- marcel_brinkkemper lazyest-gallery — Up to and including 1.1.20
- marcel_brinkkemper lazyest-gallery — Version 1.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.1.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.2.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.3
- marcel_brinkkemper lazyest-gallery — Version 1.1.3.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.3.2
- marcel_brinkkemper lazyest-gallery — Version 1.1.3.3
- marcel_brinkkemper lazyest-gallery — Version 1.1.4
- marcel_brinkkemper lazyest-gallery — Version 1.1.5
- marcel_brinkkemper lazyest-gallery — Version 1.1.6
- marcel_brinkkemper lazyest-gallery — Version 1.1.7
- marcel_brinkkemper lazyest-gallery — Version 1.1.7.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.8
- marcel_brinkkemper lazyest-gallery — Version 1.1.8.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.9
- marcel_brinkkemper lazyest-gallery — Version 1.1.9.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.10
- marcel_brinkkemper lazyest-gallery — Version 1.1.10.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.11
- marcel_brinkkemper lazyest-gallery — Version 1.1.12
- marcel_brinkkemper lazyest-gallery — Version 1.1.13
- marcel_brinkkemper lazyest-gallery — Version 1.1.14
- marcel_brinkkemper lazyest-gallery — Version 1.1.15
- marcel_brinkkemper lazyest-gallery — Version 1.1.16
- marcel_brinkkemper lazyest-gallery — Version 1.1.17.1
- marcel_brinkkemper lazyest-gallery — Version 1.1.17.2
- marcel_brinkkemper lazyest-gallery — Version 1.1.17.4
- marcel_brinkkemper lazyest-gallery — Version 1.1.18
- marcel_brinkkemper lazyest-gallery — Version 1.1.19
- marcel_brinkkemper lazyest-gallery — Version 1.1.19.1
References
- secunia.com http://secunia.com/advisories/57746 Vendor Advisory
- wordpress.org http://wordpress.org/plugins/lazyest-gallery/changelog Vendor Advisory
- www.securityfocus.com http://www.securityfocus.com/bid/66756
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/92598
- nvd.nist.gov Official NVD record