PT-2014-6001

Name of the Vulnerable Software and Affected Versions WP GuestMap plugin version 1.8 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in several PHP files. Specifically, the parameters zl, mt, and dc in "guest-locator.php",...

CVE-2014-4587: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 zl, 2 mt, or 3 dc parameter to guest-locator.php; the 4 zl, 5 mt, 6 activate, or 7 dc parameter to online-tracker.php;...