3 matches found
WP Planet <= 0.1 - Cross-Site Scripting
A cross-site scripting vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. id: CVE-2014-4592 info: name: WP Planet = 0.1 - Cross-Site Scripting author:...
CVE-2014-4592
Cross-site scripting XSS vulnerability in rss.class/scripts/magpiedebug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2014-4592
The CVE-2014-4592 entry refers to a cross-site scripting (XSS) vulnerability in the WP-Planet WordPress plugin (<= 0.1) specifically in rss.class/scripts/magpie_debug.php, exploitable via the url parameter. The Root Cause is improper input handling that allows attackers to inject and execute c...