Construction Mode 1.8 - under-construction.php wuc_logo Parameter XSS

The WP Construction Mode WordPress plugin was affected by an under-construction.php wuclogo Parameter XSS security vulnerability...

CVE-2014-4854

Cross-site scripting XSS vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuclogo parameter in a save action to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuclogo parameter in a save action to wp-admin/admin.php...

CVE-2014-4854

Cross-site scripting XSS vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuclogo parameter in a save action to wp-admin/admin.php...

CVE-2014-4854

The CVE-2014-4854 entry concerns the WP Construction Mode WordPress plugin version 1.8. Affected component: the under-construction feature using the wuc_logo parameter in a save action to wp-admin/admin.php. Root cause: reflected XSS vulnerability in the handling of wuc_logo, allowing remote atta...