CVE-2014-4717

Опубликовано: 03 июл. 2014

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) ssba_share_text parameter in a save action to wp-admin/options-general.php, which is not properly handled in the homepage, and unspecified vectors related to (2) Pages, (3) Posts, (4) Category/Archive pages or (5) post Excerpts.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sharethis:simple_share_buttons_adder:*:*:*:*:*:wordpress:*:*

Версия до 4.4 (включая)

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:1.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:2.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.3:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.4:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.5:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.6:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.7:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.8:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.9:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:4.0:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:4.1:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:4.2:*:*:*:*:wordpress:*:*

cpe:2.3:a:sharethis:simple_share_buttons_adder:4.3:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 53%

0.00297

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-cf83-77fm-2rj8

github

больше 3 лет назад