CVE-2014-9453

The CVE-2014-9453 entry concerns multiple cross-site scripting (XSS) flaws in the Simple visitor stat WordPress plugin, specifically in simple-visitor-stat.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the HTTP User-Agent or HTTP Referer headers. T...

CVE-2014-9453: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in simple-visitor-stat.php in the Simple visitor stat plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP User-Agent or 2 HTTP Referer header...