CVE-2014-4582

Name of the Vulnerable Software and Affected Versions WP Consultant plugin version 1.0 and earlier

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the dialog id parameter in the admin/admin show dialogs.php file.

Recommendations For WP Consultant plugin version 1.0 and earlier, avoid using the dialog id parameter in the affected admin/admin show dialogs.php file until a fix is available. Consider temporarily restricting access to this file to minimize the risk of exploitation.