CVE-2014-4604

Cross-site scripting XSS vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ytmpw parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ytmpw parameter...

PT-2014-6017

Name of the Vulnerable Software and Affected Versions Your Text Manager plugin versions 0.3.0 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the ytmpw parameter in the settings/pwsettings.php file...

CVE-2014-4604: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ytmpw parameter...

WordPress Your Text Manager Plugin <= 0.3.0 - XSS

Because of this vulnerability in settings/pwsettings.php, the attackers can inject arbitrary web script or HTML via the "ytmpw" parameter. Solution Update the plugin...