CVE-2014-9453

The CVE-2014-9453 entry concerns multiple cross-site scripting (XSS) flaws in the Simple visitor stat WordPress plugin, specifically in simple-visitor-stat.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the HTTP User-Agent or HTTP Referer headers. T...