Vulnerabilities > Post Highlights Projects > Post Highlights > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-10-16 | CVE-2014-8087 | Cross-site Scripting vulnerability in Post Highlights Projects Post Highlights Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php. | 4.3 |