Skip to main content

CVE-2014-9444

Description​

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type]%5b.%5d[name] parameter to the default URI.

nvd
CVE ID: CVE-2014-9444
Base Score: 4.3
Base Severity: MEDIUM
Vector String:AV:N/AC:M/Au:N/C:N/I:P/A:N

Proof Of Concept​

Nuclei Templates for CVE-2014-9444

Refrence: NVD