CVE-2014-4601

Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...

CVE-2014-4601

The CVE-2014-4601 vulnerability affects the Wu-Rating WordPress plugin (version 1.0 build 12319 and earlier). It is a reflected/Stored XSS due to improper handling of the v parameter in wu-ratepost.php, allowing remote attackers to inject arbitrary JavaScript/HTML. Impact is user session or page ...