PT-2015-6581

Name of the Vulnerable Software and Affected Versions Nextend Facebook Connect plugin versions prior to 1.5.6 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the redirect to parameter in the new fb...