PT-2014-6168

Name of the Vulnerable Software and Affected Versions WP Construction Mode plugin version 1.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the wuc logo parameter in a save action to "wp-admin/admin.php". Recommendations For WP...