Cross site scripting

Cross-site scripting XSS vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php...

PT-2015-5482

Name of the Vulnerable Software and Affected Versions Google Doc Embedder plugin versions prior to 2.5.19 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to...