QwikSec

Security Database

CVE

CWE

Training

CVE-2014-3923

Published: May 30, 2014

Modified: Sep 17, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to (1) preview.swf, (2) preview_skin_rouge.swf, (3) preview_allchars.swf, or (4) preview_skin_overlay.swf in deploy/.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20140528 CS and XSS vulnerabilities in DZS Video Gallery for WordPress

mailing-list

x_refsource_FULLDISC

http://websecurity.com.ua/7183

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.