CVE-2014-4545

MEDIUM · 4.3 CVSS Gepubliceerd: 01-07-2014 CWE-79

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in pq_dialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) leftorright or (2) author parameter.

Vendors

Pro Quoter Plugin Project

Affected products

Pro Quoter

References

codevigilant.com
www.securityfocus.com