CVE-2014-5345

Published: Aug 19, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter.

Affected (32)

Products: Disqus: Disqus Comment System

Disqus

1 product

Disqus Comment System

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Disqus Disqus Comment System	Up to 2.75
Disqus Disqus Comment System	Version 2.40
Disqus Disqus Comment System	Version 2.41
Disqus Disqus Comment System	Version 2.42
Disqus Disqus Comment System	Version 2.43
Disqus Disqus Comment System	Version 2.44
Disqus Disqus Comment System	Version 2.45
Disqus Disqus Comment System	Version 2.46
Disqus Disqus Comment System	Version 2.47
Disqus Disqus Comment System	Version 2.48
Disqus Disqus Comment System	Version 2.49
Disqus Disqus Comment System	Version 2.50
Disqus Disqus Comment System	Version 2.51
Disqus Disqus Comment System	Version 2.52
Disqus Disqus Comment System	Version 2.53
Disqus Disqus Comment System	Version 2.54
Disqus Disqus Comment System	Version 2.55
Disqus Disqus Comment System	Version 2.60
Disqus Disqus Comment System	Version 2.61
Disqus Disqus Comment System	Version 2.62
Disqus Disqus Comment System	Version 2.63
Disqus Disqus Comment System	Version 2.64
Disqus Disqus Comment System	Version 2.65
Disqus Disqus Comment System	Version 2.66
Disqus Disqus Comment System	Version 2.67
Disqus Disqus Comment System	Version 2.68
Disqus Disqus Comment System	Version 2.69
Disqus Disqus Comment System	Version 2.70
Disqus Disqus Comment System	Version 2.71
Disqus Disqus Comment System	Version 2.72
Disqus Disqus Comment System	Version 2.73
Disqus Disqus Comment System	Version 2.74