CVE-2014-4575
Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0017 (0.2%)
Percentile: 38.4%
EPSS: 2026-05-06
Affects
wikipop_plugin_project:wikipopTechnical description
Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Published: 7/1/2014, 2:55:05 PM
Last modified: 5/6/2026, 10:30:45 PM