medium4.3
CVE-2014-4576
Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attacke…
Impact
Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wordpress Social Login Project | Wordpress Social Login | through 2.0.3 |