CVE-2014-4581

The CVE-2014-4581 entry concerns the WPCB WordPress plugin ( facture.php, id parameter ) in versions 2.4.8 and earlier. A reflected cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML. Root cause is improper handling of the id parameter in factu...