Unrated severityNVD Advisory· Published Oct 20, 2014· Updated Jun 17, 2026

CVE-2014-8364

Description

Cross-site scripting (XSS) vulnerability in ss_handler.php in the WordPress Spreadsheet (wpSS) plugin 0.62 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ss_id parameter.

Affected products

Tim Rohrer/Wordpress Spreadsheet Plugin
cpe:2.3:a:tim_rohrer:wordpress_spreadsheet_plugin:0.62:*:*:*:*:wordpress:*:*
WordPress/Spreadsheet (wpSS)llm-create
Range: =0.62

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/127770/WordPress-WPSS-0.62-Cross-Site-Scripting.htmlnvdExploit
www.securityfocus.com/bid/69073nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000