Description
Cross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuc_logo parameter in a save action to wp-admin/admin.php.
Unscored
CVE-2014-4854
EUVD-2014-4773GHSA-mp7f-6c2f-45xm
Cross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary w…
Published Jul 10, 2014 · Updated Aug 6, 2024 · Assigned by mitre