CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects WordPress. It may be remotely exploitable.
CVE
CVE-2014-6604
Severity
MEDIUM
CVSS
6.1
EPSS
1.22%
WordPress
Original NVD Description
Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip parameter.
Related CVEs
Other vulnerabilities affecting the same vendor(s)