CVE-2014-4591

The vulnerability CVE-2014-4591 affects the WordPress WP-Picasa-Image plugin (versions 1.0 and earlier). The issue is a cross-site scripting (XSS) flaw in the file picasa_upload.php, exploitable via the post_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is...