CVE-2014-4535

The Import Legacy Media plugin for WordPress (version 0.1 and earlier ) is vulnerable to a Cross-site scripting (XSS) vulnerability. The root cause is a lack of proper validation of client-side data, specifically allowing remote attackers to inject arbitrary web scripts or HTML via the filename p...