EUVD-2014-4449

Malware in sbrugna...

CVE-2014-4522

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2014-4522

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2014-4522

The CVE-2014-4522 entry affects the dsSearchAgent: WordPress Edition plugin (version 1.0-beta10 and earlier) for WordPress, where user-supplied input in the action parameter to client-assist.php enables cross-site scripting (XSS). The root cause is improper handling of the action parameter, allow...

PT-2014-5951

Name of the Vulnerable Software and Affected Versions dsSearchAgent: WordPress Edition plugin version 1.0-beta10 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the action parameter i...

CVE-2014-4522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in client-assist.php in the dsSearchAgent: WordPress Edition plugin 1.0-beta10 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

WordPress dsSearchAgent WordPress Edition Plugin <= 1.0-beta10 - XSS

Because of this vulnerability in client-assist.php, the attackers can inject arbitrary web script or HTML via the "action" parameter. Solution Update the plugin...