EUVD-2014-4517

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in get.php in the WP Microblogs plugin 0.4.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the oauthverifier parameter...

CVE-2014-4590

The CVE-2014-4590 entry relates to a Cross-Site Scripting (XSS) vulnerability in the WordPress WP Microblogs plugin (version 0.4.0 and earlier). The issue is triggered in get.php via the oauth_verifier parameter, allowing remote attackers to inject arbitrary JavaScript/HTML. Affected product: WP ...