CVE-2014-4532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/printAdminUsersListFooter.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...