CVE-2014-8622

CVE-2014-8622 : This vulnerability affects the WordPress Compfight plugin, specifically version 1.4, where the compfight-search.php component is vulnerable to cross-site scripting via the search-value parameter. The issue could allow remote authenticated users to inject arbitrary script or HTML. ...

CVE-2014-5202

CVE-2014-5202 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Compfight 1.4 . The issue arises in the file compfight-search.php where an attacker can inject arbitrary script/HTML via the search-value parameter. The CVE indicates the vulnerability affects authenticated...