wpcb 2.4.8 - facture.php id Parameter Reflected XSS

The wpcb WordPress plugin was affected by a facture.php id Parameter Reflected XSS security vulnerability...

CVE-2014-4581

The CVE-2014-4581 entry concerns the WPCB WordPress plugin ( facture.php, id parameter ) in versions 2.4.8 and earlier. A reflected cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML. Root cause is improper handling of the id parameter in factu...

WordPress Class Reference Plugin <= 2.4.8 - XSS

Because of this vulnerability in facture.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...