EUVD-2014-1824

Malware in sbrugna...

Cross site scripting

Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...

CVE-2014-1750

Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...

CVE-2014-1750

CVE-2014-1750 affects the Nokia Maps & Places WordPress plugin (version up to 1.6.6). The vulnerability is an open redirect via the href parameter to page/place.html, enabling an attacker to redirect users to arbitrary sites and potentially facilitate phishing. Some sources also reference XSS, bu...

WordPress Nokia Maps & Places Plugin <= 1.6.6 - Open Redirection

Because of this vulnerability in nokia-mapsplaces.php, the attackers can redirect users to arbitrary web sites and conduct phishing attacks via a URL in the "href" parameter to page/place.html. Solution Update the plugin...