CVE-2014-5202: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

WordPress Compfight 1.4 Cross Site Scripting

Exploit Title : Wordpress Compfight 1.4 Authenticated Cross Site Scripting Exploit Author : Claudio Viviani Vendor Homepage : http://wordpress.org/plugins/easy-banners/ Software Link : http://downloads.wordpress.org/plugin/compfight.1.4.zip Date : 2014-07-03 Tested on : Windows 7 / Mozilla Firefo...