CVE-2014-4591

The vulnerability CVE-2014-4591 affects the WordPress WP-Picasa-Image plugin (versions 1.0 and earlier). The issue is a cross-site scripting (XSS) flaw in the file picasa_upload.php, exploitable via the post_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is...

WordPress Picasa Image Plugin <=1.0 - XSS

Because of this vulnerability in picasaupload.php, the attackers can inject arbitrary web script or HTML via the "postid" parameter. Solution Update the plugin...