XEN Carousel < 0.12.2 - XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter

The xen-carousel WordPress plugin was affected by a XSS vulnerabilities in xencarousel-admin.js.php via path or ajaxpath parameter security vulnerability...

CVE-2014-4602: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 ajaxpath parameter...

PT-2014-6015

Name of the Vulnerable Software and Affected Versions XEN Carousel plugin versions 0.12.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the path or ajaxpath parameters. This can lead to cross-site scripting XSS attacks. Recommendations For XE...