Unscored severity · published Nov 26, 2014
CVE-2014-9094
Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to…
–
CVSS
8.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in deploy/designer/preview.php in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) swfloc or (2) designrand parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VG
Video Gallery · Digitalzoomstudio
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9094
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9094
seclists.org
http://seclists.org/fulldisclosure/2014/Jul/65
websecurity.com.ua
http://websecurity.com.ua/7152/
www.securityfocus.com
http://www.securityfocus.com/bid/108579
www.securityfocus.com
http://www.securityfocus.com/bid/68525
More from Video Gallery
–
CVE-2014-3923
Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or…