CVE-2014-4605

This CVE affects the ZdStatistics (zdstats) WordPress plugin, specifically versions 2.0.1 and earlier. The vulnerability is an XSS in cal/test.php caused by the lang parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is partial integrity risk of the affected pages...