CVE-2014-4536
CVE-2014-4536
Vexday Risk Score
18Bajo
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
Exploit automatizable disponible (Nuclei/Metasploit).
CVSS —EPSS 3.9%KEV nãoPoC —Nuclei simMetasploit —Patch —
Ciclo de vida
27 dic 2019Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) go, (2) contactId, or (3) campaignId parameter.
Productos afectados
n/a · n/a