CVE-2014-4591

Cross-site scripting XSS vulnerability in picasaupload.php in the WP-Picasa-Image plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2014-4591

The vulnerability CVE-2014-4591 affects the WordPress WP-Picasa-Image plugin (versions 1.0 and earlier). The issue is a cross-site scripting (XSS) flaw in the file picasa_upload.php, exploitable via the post_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is...