EUVD-2014-4492

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 vp, 2 vs, 3 l, 4 vu, or 5 vm parameter...

CVE-2014-4565

The CVE-2014-4565 issue affects the WordPress plugin Verification Code for Comments (vcc.js.php) version 2.1.0 and earlier. The vulnerability is a multiple parameter reflected XSS in vcc.js.php, exploitable via the five parameters (vp, vs, l, vu, vm), allowing an attacker to inject arbitrary scri...