WP Planet <= 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. id: CVE-2014-4592 info: name: WP Planet = 0.1 - Cross-Site Scripting author:...

CVE-2014-4592

creationtimestamp| type| source ---|---|--- 2024-03-18 08:41:54+00:00| seen| https://t.me/ctinow/210266...

CVE-2014-4592

Cross-site scripting XSS vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4592

The CVE-2014-4592 entry refers to a cross-site scripting (XSS) vulnerability in the WP-Planet WordPress plugin (&lt;= 0.1) specifically in rss.class/scripts/magpie_debug.php, exploitable via the url parameter. The Root Cause is improper input handling that allows attackers to inject and execute c...