4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 url or 2 bvcurl parameter...
CVE-2014-4572
Cross-site scripting XSS vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 url or 2 bvcurl parameter...
PT-2014-5986
Name of the Vulnerable Software and Affected Versions Votecount for Balatarin plugin versions 0.1.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the url or bvcurl parameters in the...
CVE-2014-4572: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 url or 2 bvcurl parameter...