EUVD-2014-4502

Malware in sbrugna...

CVE-2014-4575

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2014-4575

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2014-4575

The CVE-2014-4575 entry documents a Cross-Site Scripting (XSS) vulnerability in the WordPress Wikipop plugin (versions 2.0 and earlier) due to insecure handling in js/window.php, allowing injection of arbitrary script via the s parameter. Affected product: WordPress Wikipop plugin

WordPress Wikipop Plugin <= 2.0 - XSS

Because of this vulnerability in js/window.php, the attackers can inject arbitrary web script or HTML via the "s" parameter. Solution Update the plugin...

Wikipop <= 2.0 - Cross-Site Scripting (XSS)

Plugin is still affected and has been closed...