CVE-2014-8492

The CVE-2014-8492 entry concerns multiple XSS vulnerabilities in WordPress Profile Builder plugin prior to v2.0.3. Vulnerable component: assets/misc/fallback-page.php; affected parameters: site_name, message, site_url. Root cause: improper sanitization of input leading to script/HTML injection. I...