EUVD-2014-4525

Malware in sbrugna...

CVE-2014-4598

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

CVE-2014-4598

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

CVE-2014-4598

Cross-site scripting (XSS) in the WordPress wp-tmkm-amazon-plugin (wp-tmkm-amazon-search.php) 1.5b and earlier via the AID parameter. Root cause: insufficient input sanitization/validation allowing injected script HTML. Affected: WordPress plugin wp-tmkm-amazon (version ≤1.5b). Impact: remote att...

CVE-2014-4598: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

PT-2014-6011

Name of the Vulnerable Software and Affected Versions wp-tmkm-amazon plugin versions 1.5b and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the AID parameter in the...