CVE-2014-9311

Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the location[id] parameter in a shareaholic_add_location action to wp-admin/admin-ajax.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:shareaholic:shareaholic:*:*:*:*:*:wordpress:*:*

Information

Published : 2015-04-14 07:59

Updated : 2015-04-15 08:15


NVD link : CVE-2014-9311

Mitre link : CVE-2014-9311


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

shareaholic

  • shareaholic