EUVD-2014-3807

Malware in sbrugna...

CVE-2014-3870: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the bib2html plugin 0.9.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the styleShortName parameter in an adminStyleAdd action to OSBiB/create/index.php...

PT-2014-5565

Name of the Vulnerable Software and Affected Versions WordPress bib2html plugin version 0.9.3 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the styleShortName parameter in an adminStyleAdd action to...