CVE-2014-2995

Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...

CVE-2014-2995

The CVE-2014-2995 issue affects the WordPress Twitget plugin prior to version 3.3.3, where twitget.php is vulnerable to cross-site scripting (XSS) via the twitget_consumer_key parameter used in wp-admin/options-general.php. Authorized WordPress administrators can inject arbitrary script/HTML due ...