TI-2014-06704 CVE-2014-8087 · GHSA-m6h8-3qmh-9pqcCross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for…Priority LOW 31Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01896 · Published 2017-10-16 · No fix listed CWE-79