CVE-2014-4513

Multiple cross-site scripting (XSS) vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) MESSAGE, (2) EMAIL, or (3) NAME parameter.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.57% chance of exploitation in the next 30 days, 91th percentile

Nuclei

medium · CWE-79

Published

2014-07-01

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4513.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2014-4511
• CVE-2014-4519
• CVE-2014-4502
• CVE-2014-4523
• CVE-2014-4501
• CVE-2014-4535