wpcb 2.4.8 - facture.php id Parameter Reflected XSS

The wpcb WordPress plugin was affected by a facture.php id Parameter Reflected XSS security vulnerability...

CVE-2014-4581

Cross-site scripting XSS vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2014-4581

The CVE-2014-4581 entry concerns the WPCB WordPress plugin ( facture.php, id parameter ) in versions 2.4.8 and earlier. A reflected cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML. Root cause is improper handling of the id parameter in factu...

PT-2014-5995

Name of the Vulnerable Software and Affected Versions WPCB plugin versions 2.4.8 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in the facture.php file. Recommendations For WPCB plugin versions 2.4.8 and...

CVE-2014-4581: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

WordPress Class Reference Plugin <= 2.4.8 - XSS

Because of this vulnerability in facture.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...