返回 CVE 浏览器

CVE-2014-7240

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0170%

EPSS Percentile40.44th

Published2017年10月6日

Last Modified2026年5月13日

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a master_response action to wp-admin/admin-ajax.php.

Affected Platforms (CPE)

📦

Formget

Easy Contact Form Solution

<= 1.6

References & Advisories

🔗 https://g0blin.co.uk/cve-2014-7240/

🔗 https://wpvulndb.com/vulnerabilities/8234

🔗 https://g0blin.co.uk/cve-2014-7240/

🔗 https://wpvulndb.com/vulnerabilities/8234

相关漏洞威胁

CVE-2014-052610.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...

CVE-2014-052710.0

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows at...

CVE-2014-049810.0

Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Ma...

CVE-2014-052910.0

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to ex...