EUVD-2014-4507

Malware in sbrugna...

CVE-2014-4580: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the BlipBotID parameter...