VULNERABILITY INTELLIGENCE

CVE-2014-2995

CVSS score3.5 LOW
EPSS probability3.58%
CISA KEVNot currently listed
Published2014-10-17
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitget_consumer_key parameter to wp-admin/options-general.php.

Weakness classification

  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Primary references