What’s Vulnerable › Vulnerabilities

CVE-2014-4521

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-07-01 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Affected products

• Diversesolutions Dsidxpress Idx Plugin: through 2.1.0; 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5 (+34)

References

• http://codevigilant.com/disclosure/wp-plugin-dsidxpress-a3-cross-site-scripting-xss
• http://wordpress.org/plugins/dsidxpress/changelog
• http://codevigilant.com/disclosure/wp-plugin-dsidxpress-a3-cross-site-scripting-xss
• http://wordpress.org/plugins/dsidxpress/changelog

Get alerted when CVE-2014-4521 or the next vulnerability affects your stack