EUVD-2014-4444

Malware in sbrugna...

CVE-2014-4517

Cross-site scripting XSS vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter...

CVE-2014-4517

The CVE-2014-4517 entry concerns the WordPress plugin CBI Referral Manager (versions up to 1.2.1). The vulnerability is a Cross‑Site Scripting (XSS) flaw in getNetworkSites.php, exploitable via the searchString parameter, enabling remote attackers to inject arbitrary script/HTML. This is supporte...

CVE-2014-4517

Cross-site scripting XSS vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter...

CVE-2014-4517: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter...

WordPress CBI Referral Manager Plugin <= 1.2.1 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "searchString" parameter. Solution Update the plugin...