PT-2014-5992

Name of the Vulnerable Software and Affected Versions WP App Maker plugin versions 1.0.16.4 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the uid parameter in the asset-studio/icons-launcher.php file...

WordPress WP App Maker Plugin <= 1.0.16.4 - XSS

Because of this vulnerability in asset-studio/icons-launcher.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...