What is CVE-2014-4597?

CVE-2014-4597 is a vulnerability in Wp Social Invitations Project, classified under Cross-site Scripting. Published 2014-07-02.

Is CVE-2014-4597 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Wp Social Invitations Project

CVE-2014-4597

Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

Wp_social_invitations_project Wp_social_invitations
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Patch)

Frequently asked questions

What is CVE-2014-4597?: CVE-2014-4597 is a vulnerability in Wp Social Invitations Project, classified under Cross-site Scripting. Published 2014-07-02.
Is CVE-2014-4597 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.