CVE-2014-4545

Multiple cross-site scripting XSS vulnerabilities in pqdialog.php in the Pro Quoter plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 leftorright or 2 author parameter...

CVE-2014-4545

The CVE-2014-4545 entry concerns the WordPress Pro Quoter plugin (versions 1.0 and earlier). It describes multiple XSS vulnerabilities in pq_dialog.php allowing an attacker to inject arbitrary script/HTML via the leftorright or author parameters due to insufficient input sanitization. Affected co...

WordPress Pro Quoter Plugin <= 1.0 - Multiple XSS

Because of these vulnerabilities in pqdialog.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...