Vulnerability Details CVE-2014-4585
Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2014-4585
-
cpe:2.3:a:mnt-tech:wp-facethumb:0.1
-
cpe:2.3:a:mnt-tech:wp-facethumb:0.2
-
cpe:2.3:a:mnt-tech:wp-facethumb:0.3
-
cpe:2.3:a:mnt-tech:wp-facethumb:1.0