Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the 1 searchparam parameter to search.php or 2 name, 3 address, or 4 comment parameter to forms.php...

CVE-2014-8751

GoYWP WebPress 13.00.06 is affected by multiple XSS vulnerabilities (CVE-2014-8751). The issues allow remote attackers to inject arbitrary web script or HTML via the following inputs: (1) search.php with the search_param parameter, and (2) forms.php with the name, address, or comment parameters. ...