CVE-2014-4542

CVE-2014-4542 describes a cross-site scripting (XSS) vulnerability in redirect.php of the WordPress Ooorl plugin. An attacker can inject arbitrary web script or HTML via the url parameter, potentially affecting users who load the vulnerable page. The root cause is improper handling/validation of ...