CVE-2014-4558

Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.21% chance of exploitation in the next 30 days, 90th percentile

Nuclei

medium · CWE-79

Published

2019-12-27

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-woocommerce-a3-cross…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4558.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2014-4550
• CVE-2014-4561
• CVE-2014-4544
• CVE-2014-4577
• CVE-2014-4539
• CVE-2014-4592