XSS in Verification Code For Comments Project
CVE-2014-4565
Multiple cross-site scripting (XSS) vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) vp, (2) vs, (3) l, (4) vu, or (5) vm parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.
Affected products
- Verification_code_for_comments_project Verification_code_for_comments
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-2014-4565?
- CVE-2014-4565 is a vulnerability in Verification Code For Comments Project, classified under Cross-site Scripting. Published 2014-07-02.
- Is CVE-2014-4565 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.