WordPress Plugin Vulnerabilities

Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness

Description

The Subscribe To Comments Reloaded WordPress plugin was affected by an options/index.php manager_page Parameter Stored XSS Weakness security vulnerability.

Affects Plugins

Plugin icon
subscribe-to-comments-reloaded
Fixed in 140219

References

CVE
CVE-2014-2274

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
94b9519f-5b80-40a3-b58e-7bfd2c3f31a9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-11-28
Title
WP MathJax <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-10-17
Title
Woo Custom Emails <= 2.2 - Reflected XSS
Published
2024-05-06
Title
WPCS ( WordPress Custom Search ) <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2023-09-25
Title
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
Published
2024-01-08
Title
GD Rating System < 3.5.1 - Unauthenticated Stored Cross-Site Scripting via IP