cleantalk
Vulnerabilities and Security Researches

WP eBay Product Feeds, CVE-2014-4525

CVE, Research URL

CVE-2014-4525

Application

WP eBay Product Feeds

Published on
Dec 27, 2019
Research Description
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.
Affected versions
Min -, max 3.4.
Status
vulnerable