CVE-2014-4596
snapapp project snapapp: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.
Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) msg or (2) act parameter.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-11-01)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced