EUVD-2013-3464

Malware in sbrugna...

PT-2013-4459

Name of the Vulnerable Software and Affected Versions WP FuneralPress plugin versions prior to 1.1.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the message, photo-message...

CVE-2013-3529: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 message, 2 photo-message, or 3 youtube-message parameter...