What is CVE-2014-4549?

CVE-2014-4549 is a vulnerability in Woocommerce Sagepay Direct Payment Gateway Project, classified under Cross-site Scripting. Published 2014-07-02.

Is CVE-2014-4549 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Woocommerce Sagepay Direct Payment Gateway Project

CVE-2014-4549

Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MD or (2) PARes parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

Affected products

Woocommerce_sagepay_direct_payment_gateway_project Woocommerce_sagepay_direct_payment_gateway
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2014-4549?: CVE-2014-4549 is a vulnerability in Woocommerce Sagepay Direct Payment Gateway Project, classified under Cross-site Scripting. Published 2014-07-02.
Is CVE-2014-4549 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.