Unrated severityNVD Advisory· Published Aug 7, 2014· Updated Jun 17, 2026
CVE-2014-5190
CVE-2014-5190
Description
Cross-site scripting (XSS) vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Affected products
2- cpe:2.3:a:si_captcha_anti-spam_project:si_captcha_anti-spam:2.7.4:*:*:*:*:*:*:*
- Range: <=2.7.4
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.