CVE-2014-4554

The CVE concerns the WordPress SS Downloads plugin (templates/download.php) where an XSS vulnerability allows an attacker to inject arbitrary script/HTML via the title parameter in versions before 1.5. Impact is remote script injection; no exploitation details are provided in the documents. Remed...