WordPress Plugin Nextend Facebook Connect 1.4.59 - Cross-Site Scripting

Exploit Title: Nextend Facebook Connect 1.4.59 XSS Date: 16-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/nextend-facebook-connect.1.4.59.zip Category: webapps CVE: CVE-2014-8800 1...

Nextend Facebook Connect <= 1.4.59 - Cross-Site Scripting (XSS)

The Nextend Social Login and Register WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...