EUVD-2014-4470

Malware in sbrugna...

CVE-2014-4543

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...

CVE-2014-4543

The CVE-2014-4543 entry documents XSS vulnerabilities in the WordPress Pay Per Media Player plugin (payper/payper.php) version 1.24 and earlier. The root cause is unsanitized input across multiple parameters (fcolor, links, stitle, height, width, host, bcolor, msg, id, size) which allows remote a...

CVE-2014-4543: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...