EUVD-2014-4449

Malware in sbrugna...

CVE-2014-4522

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2014-4522

The CVE-2014-4522 entry affects the dsSearchAgent: WordPress Edition plugin (version 1.0-beta10 and earlier) for WordPress, where user-supplied input in the action parameter to client-assist.php enables cross-site scripting (XSS). The root cause is improper handling of the action parameter, allow...

CVE-2014-4522

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

WordPress dsSearchAgent WordPress Edition Plugin <= 1.0-beta10 - XSS

Because of this vulnerability in client-assist.php, the attackers can inject arbitrary web script or HTML via the "action" parameter. Solution Update the plugin...