VIR Vulnerability Intelligence Relay

CVE-2014-3884

medium
Published 2014-07-20 · Modified 2026-05-06
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.3

Description

Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
webminusermin{"endIncluding":"1.590"}
webminusermin0.4
webminusermin0.5
webminusermin0.6
webminusermin0.7
webminusermin0.80
webminusermin0.90
webminusermin0.910
webminusermin0.929
webminusermin0.930
webminusermin0.940
webminusermin0.950
webminusermin0.960
webminusermin0.970
webminusermin0.980
webminusermin0.990
webminusermin1.000
webminusermin1.010
webminusermin1.020
webminusermin1.030
webminusermin1.040
webminusermin1.050
webminusermin1.051
webminusermin1.060
webminusermin1.070
webminusermin1.080
webminusermin1.090
webminusermin1.100
webminusermin1.110
webminusermin1.120
webminusermin1.130
webminusermin1.140
webminusermin1.150
webminusermin1.160
webminusermin1.170
webminusermin1.180
webminusermin1.190
webminusermin1.200
webminusermin1.210
webminusermin1.220
webminusermin1.230
webminusermin1.240
webminusermin1.250
webminusermin1.260
webminusermin1.270
webminusermin1.280
webminusermin1.290
webminusermin1.300
webminusermin1.310
webminusermin1.320
webminusermin1.330
webminusermin1.340
webminusermin1.350
webminusermin1.360
webminusermin1.370
webminusermin1.380
webminusermin1.390
webminusermin1.400
webminusermin1.410
webminusermin1.420
webminusermin1.430
webminusermin1.440
webminusermin1.450
webminusermin1.460
webminusermin1.470
webminusermin1.480
webminusermin1.490
webminusermin1.500
webminusermin1.510
webminusermin1.520
webminusermin1.530
webminusermin1.540
webminusermin1.550
webminusermin1.560
webminusermin1.570
webminusermin1.580

References

CWEs

CWE-79

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.