Record summary

CVE-2014-3842 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) decrypt or (2) encrypt parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple VulnerabilitiesExploitDB exploitby Everett GriffithsNot analyzed1 file

linked to 5 vulnerabilities

ExploitDB

PoC details

References

6