What is CVE-2014-4572?

CVE-2014-4572 is a vulnerability in Votecount For Balatarin Project, classified under Cross-site Scripting. Published 2014-07-02.

Is CVE-2014-4572 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Votecount For Balatarin Project

CVE-2014-4572

Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Votecount_for_balatarin_project Votecount_for_balatarin
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-4572?: CVE-2014-4572 is a vulnerability in Votecount For Balatarin Project, classified under Cross-site Scripting. Published 2014-07-02.
Is CVE-2014-4572 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.