What is CVE-2014-4517?

CVE-2014-4517 is a vulnerability in Cbi Referral Manager Project, classified under Cross-site Scripting. Published 2014-10-21.

Is CVE-2014-4517 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Cbi Referral Manager Project

CVE-2014-4517

Cross-site scripting (XSS) vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Cbi_referral_manager_project Cbi_referral_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4517?: CVE-2014-4517 is a vulnerability in Cbi Referral Manager Project, classified under Cross-site Scripting. Published 2014-10-21.
Is CVE-2014-4517 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.