CVE-2014-5185

The CVE-2014-5185 entry concerns the Quartz plugin for WordPress (v1.01.1). A SQL injection vulnerability exists in the plugin’s quartz/quote_form.php, exploitable by remote authenticated users with Contributor privileges via the quote parameter during an edit action in wp-admin/edit.php. Affecte...