CVEvulnerability

CVE-2014-4521

4.3 MEDIUM Published 2014-07-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Affected configurations

• diversesolutions dsidxpress idx plugin (<= 2.1.0) • diversesolutions dsidxpress idx plugin 2.0.0 • diversesolutions dsidxpress idx plugin 2.0.1 • diversesolutions dsidxpress idx plugin 2.0.2 • diversesolutions dsidxpress idx plugin 2.0.3 • diversesolutions dsidxpress idx plugin 2.0.4 • diversesolutions dsidxpress idx plugin 2.0.5 • diversesolutions dsidxpress idx plugin 2.0.6 • diversesolutions dsidxpress idx plugin 2.0.7 • diversesolutions dsidxpress idx plugin 2.0.8 • diversesolutions dsidxpress idx plugin 2.0.9 • diversesolutions dsidxpress idx plugin 2.0.10 • diversesolutions dsidxpress idx plugin 2.0.11 • diversesolutions dsidxpress idx plugin 2.0.12 • diversesolutions dsidxpress idx plugin 2.0.13 • diversesolutions dsidxpress idx plugin 2.0.14 • diversesolutions dsidxpress idx plugin 2.0.15 • diversesolutions dsidxpress idx plugin 2.0.16 • diversesolutions dsidxpress idx plugin 2.0.17 • diversesolutions dsidxpress idx plugin 2.0.18 • diversesolutions dsidxpress idx plugin 2.0.19 • diversesolutions dsidxpress idx plugin 2.0.20 • diversesolutions dsidxpress idx plugin 2.0.21 • diversesolutions dsidxpress idx plugin 2.0.22 • diversesolutions dsidxpress idx plugin 2.0.23 • diversesolutions dsidxpress idx plugin 2.0.24 • diversesolutions dsidxpress idx plugin 2.0.25 • diversesolutions dsidxpress idx plugin 2.0.26 • diversesolutions dsidxpress idx plugin 2.0.27 • diversesolutions dsidxpress idx plugin 2.0.28 • diversesolutions dsidxpress idx plugin 2.0.29 • diversesolutions dsidxpress idx plugin 2.0.30 • diversesolutions dsidxpress idx plugin 2.0.31 • diversesolutions dsidxpress idx plugin 2.0.32 • diversesolutions dsidxpress idx plugin 2.0.33 • diversesolutions dsidxpress idx plugin 2.0.34 • diversesolutions dsidxpress idx plugin 2.0.35 • diversesolutions dsidxpress idx plugin 2.0.36 • diversesolutions dsidxpress idx plugin 2.0.37 • diversesolutions dsidxpress idx plugin 2.0.38 • diversesolutions dsidxpress idx plugin 2.0.39

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References