TI-2013-02039 CVE-2013-2287 · GHSA-63p5-gxmq-68rjMultiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader…Priority LOW 32Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or (2) blog parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09205 · Published 2014-04-04 · No fix listed CWE-79