What is CVE-2014-4564?

CVE-2014-4564 is a vulnerability in Validated Plugin Project, classified under Cross-site Scripting. Published 2014-07-01.

Is CVE-2014-4564 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Validated Plugin Project

CVE-2014-4564

Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Validated_plugin_project Validated_plugin
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4564?: CVE-2014-4564 is a vulnerability in Validated Plugin Project, classified under Cross-site Scripting. Published 2014-07-01.
Is CVE-2014-4564 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.