Unscored severity · published Jan 13, 2015
CVE-2014-10012
Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Awp Classifieds · Strategy11
3.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-10012
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-10012
Exploit
http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/98588
More from Awp Classifieds
9.8
CVE-2022-3254
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
8.8
CVE-2024-31350
WordPress AWP Classifieds plugin <= 4.3.1 - Broken Access Control vulnerability
8.8
CVE-2023-41801
Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin <= 4.3 versions
–
CVE-2014-10013
SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase…