CVE-2014-5202
Compfight - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter.
Scores
EPSS
0.0014
EPSS Percentile
33.7%
Details
CWE
CWE-79
Status
published
Products (2)
compfight_project/compfight
n/a/n/a
Published
Aug 12, 2014
Tracked Since
Feb 18, 2026