Vulnerabilities > Diversesolutions > Dsidxpress IDX Plugin > 2.0.26

DATE CVE VULNERABILITY TITLE RISK
2014-07-01 CVE-2014-4521 Cross-Site Scripting vulnerability in Diversesolutions Dsidxpress IDX Plugin
Cross-site scripting (XSS) vulnerability in client-assist.php in the dsIDXpress IDX plugin before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
4.3