VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 2, 2015· Updated Jun 17, 2026

CVE-2014-9444

CVE-2014-9444

Description

Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errors[fu-disallowed-mime-type][0][name] parameter to the default URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Frontend Uploader Project/Frontend Uploader2 versions
    cpe:2.3:a:frontend_uploader_project:frontend_uploader:0.9.2:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:frontend_uploader_project:frontend_uploader:0.9.2:*:*:*:*:wordpress:*:*
    • (no CPE)range: <=0.9.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.