CVE-2014-9341

CVE-2014-9341 affects the WordPress plugin yURL ReTwitt (version 1.4 and earlier). The vulnerability is a combination of CSRF and XSS: remote attackers can hijack an administrator’s session to perform actions via requests that trigger XSS through the yurl_login or yurl_anchor parameters on the yu...

WordPress yURL ReTwitt WP 1.4 CSRF / XSS

Title: CSRF/XSS Vulnerability in yURL ReTwitt WP Plugin Author: Manideep K CVE-ID: CVE-2014-9341 Plugin Homepage: https://wordpress.org/plugins/yurl-retwitt/ Version Affected: 1.4 probably lower versions Severity: High About Plugin: This plugin will allow your readers to publish a RT Re-Twitt on...