Description
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php.
Unscored
CVE-2014-4932
EUVD-2014-4849GHSA-cmrq-rhmh-prvq
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbi…
Published Aug 28, 2018 · Updated Aug 6, 2024 · Assigned by mitre