Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Twitget version 3.3.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A...

Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...