WP Guestmap Project

DATE	CVE	VULNERABILITY TITLE	RISK
2014-07-02	CVE-2014-4587	Cross-Site Scripting vulnerability in WP Guestmap Project WP Guestmap Project 1.8 Multiple cross-site scripting (XSS) vulnerabilities in the WP GuestMap plugin 1.8 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) zl, (2) mt, or (3) dc parameter to guest-locator.php; the (4) zl, (5) mt, (6) activate, or (7) dc parameter to online-tracker.php; the (8) zl, (9) mt, or (10) dc parameter to stats-map.php; or the (11) zl, (12) mt, (13) activate, or (14) dc parameter to weather-map.php. network wp-guestmap-project CWE-79	4.3