EUVD-2014-4492

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 vp, 2 vs, 3 l, 4 vu, or 5 vm parameter...

CVE-2014-4565

The CVE-2014-4565 issue affects the WordPress plugin Verification Code for Comments (vcc.js.php) version 2.1.0 and earlier. The vulnerability is a multiple parameter reflected XSS in vcc.js.php, exploitable via the five parameters (vp, vs, l, vu, vm), allowing an attacker to inject arbitrary scri...

PT-2014-5980

Name of the Vulnerable Software and Affected Versions Verification Code for Comments plugin versions 2.1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the vp, vs, l, vu, or vm parameters in the vcc.js.php file. This can lead to cross-site...

CVE-2014-4565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 vp, 2 vs, 3 l, 4 vu, or 5 vm parameter...