CVE-2014-4587

WP GuestMap plugin for WordPress up to version 1.8 is affected by multiple XSS vulnerabilities. The issue arises from unsanitized user-supplied input in parameters to guest-locator.php, online-tracker.php, stats-map.php, and weather-map.php, enabling remote attackers to inject arbitrary script/HT...