CVE-2014-4537: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inpage.tpl.php in the Keyword Strategy Internal Links plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 1 sort, 2 search, or 3 dir parameter...

WordPress Keyword Strategy Internal Links Plugin <= 2.0 - XSS

Because of this vulnerability in inpage.tpl.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...