CVE-2014-9336

The CVE-2014-9336 entry concerns the WordPress iTwitter plugin (v0.04 and earlier). An underlying issue consists of a client-side CSRF vulnerability coupled with a cross-site scripting (XSS) flaw in iTwitter.php, exploitable via the itex_t_twitter_username and itex_t_twitter_userpass parameters s...