⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-4540

MEDIUM · 4.3 CVSS Gepubliceerd: 02-07-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Vendors

Oleggo Livestream Project

Affected products

Oleggo Livestream

References

codevigilant.com