CVE-2014-3923
NONE EPSS 73.1%
Published May 30, 201412y ago · Modified Jun 17, 20262w ago
Published May 30, 2014 12y ago
Last Modified Jun 17, 2026 2w ago
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to (1) preview.swf, (2) preview_skin_rouge.swf, (3) preview_allchars.swf, or (4) preview_skin_overlay.swf in deploy/.
Threat Intelligence
EPSS Exploit Probability
73.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| digitalzoomstudio | video_gallery | * | any |
References 2
- seclists.org http://seclists.org/fulldisclosure/2014/May/157
- websecurity.com.ua http://websecurity.com.ua/7183
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.