What is CVE-2014-4526?

CVE-2014-4526 is a vulnerability in Efence Project, classified under Cross-site Scripting. Published 2014-07-02.

Is CVE-2014-4526 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Efence Project

CVE-2014-4526

Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) zoneid, (3) pubKey, or (4) privKey parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Efence_project Efence
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4526?: CVE-2014-4526 is a vulnerability in Efence Project, classified under Cross-site Scripting. Published 2014-07-02.
Is CVE-2014-4526 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.