WordPress Plugin Vulnerabilities

HK Exif Tags 1.11 - hk_exif_tags.php hk_exif_tags_images_process Function EXIF Tags H&ling Stored XSS

Description

The HK Exif Tags WordPress plugin was affected by a hk_exif_tags.php hk_exif_tags_images_process Function EXIF Tags H&ling Stored XSS security vulnerability.

Affects Plugins

Plugin icon
hk-exif-tags
Fixed in 1.12

References

CVE
CVE-2014-100007
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/92555

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
49ac1aee-35a1-4682-a4cf-84ac0a14d6eb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-03-07
Title
Orbit Fox by ThemeIsle < 2.10.33 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget
Published
2024-03-25
Title
WP User Profile Avatar < 1.0.2 - Contributor+ Stored XSS
Published
2024-10-31
Title
WP Feature Box <= 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-07-04
Title
WP Video Lightbox < 1.9.6 - Admin+ Stored Cross-Site Scripting
Published
2024-08-07
Title
Themify Shortcodes < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting