CVE-2014-4574: Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plu

Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the hei

Status

Published

2014-07-02

Updated

2024-08-06

Assigning organization

mitre

Description

Cross-site scripting (XSS) vulnerability in resize.php in the WebEngage plugin before 2.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the height parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

http://codevigilant.com/disclosure/wp-plugin-webengage-a3-cross-site-scripting-xss ↗
http://wordpress.org/plugins/webengage/changelog ↗
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=844373%40webengage&old=788585%40webengage&sfp_email=&sfph_mail= ↗