CVE-2014-4932

CVE-2014-4932 is a documented XSS in the Wordfence Security plugin for WordPress, before version 5.1.5. The issue allows a remote attacker to inject arbitrary web script or HTML by manipulating the val parameter to whois.php. Several connected sources corroborate the affected product and vulnerab...