CVE-2014-2995 | BDVDB-2026-65186 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitget_consumer_key parameter to wp-admin/options-general.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://wordpress.org/plugins/twitget/changelog
https://exchange.xforce.ibmcloud.com/vulnerabilities/92392
http://packetstormsecurity.com/files/126134
http://seclists.org/fulldisclosure/2014/Apr/172
https://security.dxw.com/advisories/csrfxss-vulnerability-in-twitget-3-3-1

Exploit#

No public exploit known

History#

Version 12014-10-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.