CVE-2014-4590

The CVE-2014-4590 entry relates to a Cross-Site Scripting (XSS) vulnerability in the WordPress WP Microblogs plugin (version 0.4.0 and earlier). The issue is triggered in get.php via the oauth_verifier parameter, allowing remote attackers to inject arbitrary JavaScript/HTML. Affected product: WP ...