What is CVE-2014-8724?

CVE-2014-8724 is a vulnerability in Boldgrid W3_total_cache, classified under Cross-site Scripting. Published 2014-12-19.

Is CVE-2014-8724 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Boldgrid W3_total_cache

CVE-2014-8724

Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the "Cache key" in the HTML-Comments, as dem…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.021 (79.2th percentile) — read the EPSS interpretation.

Affected products

Boldgrid W3_total_cache
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2014-8724?: CVE-2014-8724 is a vulnerability in Boldgrid W3_total_cache, classified under Cross-site Scripting. Published 2014-12-19.
Is CVE-2014-8724 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.