CVE-2014-4521
WordPress dsIDXpress <2.1.1 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
Scores
EPSS
0.0017
EPSS Percentile
38.7%
Details
CWE
CWE-79
Status
published
Products (42)
diversesolutions/dsidxpress_idx_plugin
< 2.1.0
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
diversesolutions/dsidxpress_idx_plugin
... and 32 more
Published
Jul 01, 2014
Tracked Since
Feb 18, 2026