CVE-2014-4576

The CVE-2014-4576 entry describes a Cross-site scripting (XSS) vulnerability in the WordPress Social Login plugin. Affected component: diagnostics functionality in services/diagnostics.php. Impact: remote attackers can inject arbitrary web script or HTML via the xhrurl parameter in WordPress inst...