CVE-2014-4527

The CVE-2014-4527 entry concerns the WordPress EnvialoSimple plugin (envialosimple-email-marketing-y-newsletters-gratis) with multiple XSS vulnerabilities. The affected component is the PHP script paginas/vista-previa-form.php, where XSS can be triggered via the FormID or AdministratorID paramete...