CVE-2014-4541
Beschrijving NL
Cross-site scripting (XSS) kwetsbaarheid in shortcode-generator/preview-shortcode-external.php in de OMFG Mobile Pro plugin 1.1.26 en eerder voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de shortcode parameter.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.