CVE-2014-6604 | BDVDB-2026-98478 Detail

Description#

Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://plugins.trac.wordpress.org/changeset/993564/subscribe2
http://barmat.io/blog/2014/10/01/stored-xss-vulnerability-in-the-wordpress-plugin-subscribe2/

Exploit#

No public exploit known

History#

Version 12018-03-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.