EUVD-2014-4516

Malware in sbrugna...

CVE-2014-4589

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2014-4589

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

CVE-2014-4589

CVE-2014-4589 affects the WP Silverlight Media Player (wp-media-player) WordPress plugin 0.8 and earlier. The vulnerability resides in uploader.php and is triggered via the post_id parameter, allowing remote attackers to inject arbitrary web script or HTML (XSS). Mitigation: update the plugin to ...

CVE-2014-4589: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in uploader.php in the WP Silverlight Media Player wp-media-player plugin 0.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the postid parameter...

WordPress Silverlight Media Player Plugin <= 0.8 - XSS

Because of this vulnerability in uploader.php, the attackers can inject arbitrary web script or HTML via the "postid" parameter. Solution Update the plugin...