CVE-2014-4532

The CVE-2014-4532 entry documents a cross-site scripting (XSS) vulnerability in the WordPress GarageSale plugin prior to version 1.2.3. The flaw exists in the templates/printAdminUsersList_Footer.tpl.php and allows remote attackers to inject arbitrary script or HTML via the page parameter. Affect...