1. Home
  2. CVE Database
  3. CVE-2014-4578
MEDIUM · 4.3

CVE-2014-4578

Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
Wp App Maker ProjectWp App Maker<= 1.0.16.4

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2014-4578?

CVE-2014-4578 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in asset-studio/icons-launcher.php in the WP App Maker plugin 1.0.16.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML...

How severe is CVE-2014-4578?

CVE-2014-4578 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-4578?

Check the references section above for vendor advisories and patch information. Affected products include: Wp App Maker Project Wp App Maker.