Description
Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.
Unscored
CVE-2014-4548
EUVD-2014-4475GHSA-r26c-3r7c-97x2
Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attac…
Published Dec 27, 2019 · Updated Aug 6, 2024 · Assigned by mitre