CVE-2014-4594 – WordPress Responsive Preview <= 1.1 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2014-4594

Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. Vulnerabilidad de XSS en index.php en el plugin WordPress Responsive Preview anterior a 1.2 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro url. • http://codevigilant.com/disclosure/wp-plugin-wp-responsive-preview-a3-cross-site-scripting-xss http://wordpress.org/plugins/wp-responsive-preview/changelog http://www.securityfocus.com/bid/68408 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •