PT-2015-3633

Name of the Vulnerable Software and Affected Versions April's Super Functions Pack plugin versions prior to 1.4.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the readme.php file. Recommendations For versions...