TI-2014-03733 CVE-2014-4546 · GHSA-8h6p-q4hp-3v78Cross-site scripting (XSS) vulnerability in book_ajax.php in the Rezgo plugin 1.4.2 and…Priority LOW 23Cross-site scripting (XSS) vulnerability in book_ajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01629 · Published 2014-07-02 · No fix listed CWE-79