CVE-2014-4606

The ZeenShare WordPress plugin (versions 1.0.1 and earlier) is affected by a Cross-Site Scripting (XSS) vulnerability in the redirect_to_zeenshare.php handler. The issue allows remote attackers to inject arbitrary scripts/HTML by passing a crafted zs_sid parameter. The vulnerability is documented...

CVE-2014-4606: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in redirecttozeenshare.php in the ZeenShare plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the zssid parameter...