CVE-2014-4574

The CVE-2014-4574 entry concerns the WordPress WebEngage plugin, where an XSS vulnerability exists in resize.php. The issue is triggered by the height parameter, affecting versions before 2.0.1. The root cause is a cross-site scripting flaw in the handling of this parameter, allowing injection of...