CVE-2014-4513
CVE-2014-4513
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 4.6%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
01 Jul 2014Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.
Affected products
n/a · n/a