EUVD-2014-4522

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 oauthcallback parameter to htmlapiauthorize.php or the 2 oauthtokentemp or 3 oauthcallbacktemp parameter to...

CVE-2014-4595

CVE-2014-4595 involves multiple XSS vulnerabilities in the WordPress WP RESTful plugin (version 0.1 and earlier). The issues are triggered through the parameters (1) oauth_callback to html_api_authorize.php, and (2) oauth_token_temp or (3) oauth_callback_temp to html_api_login.php, allowing remot...

CVE-2014-4595

Multiple cross-site scripting XSS vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 oauthcallback parameter to htmlapiauthorize.php or the 2 oauthtokentemp or 3 oauthcallbacktemp parameter to...

CVE-2014-4595: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP RESTful plugin 0.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 oauthcallback parameter to htmlapiauthorize.php or the 2 oauthtokentemp or 3 oauthcallbacktemp parameter to...