Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-16T15:00:00
Updated: 2024-08-06T13:10:50.050Z
Reserved: 2014-10-09T00:00:00
Link: CVE-2014-8087
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-16T15:29:00.277
Modified: 2024-11-21T02:18:31.433
Link: CVE-2014-8087
Redhat
No data.