CVE-2014-4533

The CVE-2014-4533 entry describes a Cross-site scripting (XSS) flaw in the WordPress GEO Redirector plugin, via ajax_functions.php, affecting version 1.0.1 and earlier. The vulnerability is exploitable through the hid_id parameter to inject arbitrary script/HTML. Affected component: GEO Redirecto...

WordPress GEO Redirect Plugin <= 1.0.1 - XSS

Because of this vulnerability in ajaxfunctions.php, the attackers can inject arbitrary web script or HTML via the "hidid" parameter. Solution Update the plugin...