CVE-2014-4543

The CVE-2014-4543 entry documents XSS vulnerabilities in the WordPress Pay Per Media Player plugin (payper/payper.php) version 1.24 and earlier. The root cause is unsanitized input across multiple parameters (fcolor, links, stitle, height, width, host, bcolor, msg, id, size) which allows remote a...