CVE-2014-4540

The CVE-2014-4540 entry describes a Cross-site scripting (XSS) vulnerability in the Oleggo LiveStream WordPress plugin, version 0.2.6 and earlier, in the oleggo-twitter/twitter_login_form.php file. The flaw allows remote attackers to inject arbitrary script or HTML via the msg parameter. Impact i...

WordPress Oleggo LiveStream Plugin <= 0.2.6 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...