CVE-2014-4522

The CVE-2014-4522 entry affects the dsSearchAgent: WordPress Edition plugin (version 1.0-beta10 and earlier) for WordPress, where user-supplied input in the action parameter to client-assist.php enables cross-site scripting (XSS). The root cause is improper handling of the action parameter, allow...