CVE-2014-4595
WP RESTful <0.1 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) oauth_callback parameter to html_api_authorize.php or the (2) oauth_token_temp or (3) oauth_callback_temp parameter to html_api_login.php.
Scores
EPSS
0.0024
EPSS Percentile
46.8%
Details
CWE
CWE-79
Status
published
Products (2)
wp_restful_project/wp_restful
< 0.1
n/a/n/a
Published
Jul 02, 2014
Tracked Since
Feb 18, 2026