CVE-2014-3923 - CVE House
Back to Database
Status published Medium CVE-2014-3923

Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to (1) preview.swf, (2) preview_skin_rouge.swf, (3) preview_allchars.swf, or (4) preview_skin_overlay.swf in deploy/.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3923

Credits & Attribution

No credits recorded in the NVD database.

References

More from digitalzoomstudio

View All →
CVE-2025-53226
WordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
High 7.1
CVE-2025-23581
WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2025-23579
WordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerability
Medium 6.5
CVE-2025-22503
WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability
Medium 4.3
CVE-2024-51848
WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerability
Medium 6.5

Affected Vendor

digitalzoomstudio

View all reports →

Affected Software

video gallery
Vulnerable Versions:
Unknown

Timeline

Official Publish: May 30th, 2014
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.