EUVD-2014-4508

Malware in sbrugna...

CVE-2014-4581

Cross-site scripting XSS vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2014-4581

Cross-site scripting XSS vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2014-4581

The CVE-2014-4581 entry concerns the WPCB WordPress plugin ( facture.php, id parameter ) in versions 2.4.8 and earlier. A reflected cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML. Root cause is improper handling of the id parameter in factu...