Cross site scripting

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2014-4521

The CVE-2014-4521 entry concerns WordPress: dsIDXpress IDX Plugin, vulnerable component is client-assist.php. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML by supplying a crafted action parameter. Affected version appears to be t...

WordPress dsSearchAgent WordPress Edition Plugin <= 1.0-beta10 - XSS

Because of this vulnerability in client-assist.php, the attackers can inject arbitrary web script or HTML via the "action" parameter. Solution Update the plugin...

WordPress dsIDXpress IDX Plugin <= 2.1.0 - XSS

Because of this vulnerability in client-assist.php, the attackers can inject arbitrary web script or HTML via the "action" parameter. Solution Update the plugin...