What is CVE-2014-4537?

CVE-2014-4537 is a vulnerability in Keyword Strategy Internal Links Project, classified under Cross-site Scripting. Published 2014-07-02.

Is CVE-2014-4537 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Keyword Strategy Internal Links Project

CVE-2014-4537

Cross-site scripting (XSS) vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) sort, (2) search, or (3) dir parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Keyword_strategy_internal_links_project Keyword_strategy_internal_links
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4537?: CVE-2014-4537 is a vulnerability in Keyword Strategy Internal Links Project, classified under Cross-site Scripting. Published 2014-07-02.
Is CVE-2014-4537 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.