TI-2014-03735 CVE-2014-4548 · GHSA-r26c-3r7c-97x2Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin…Priority LOW 30Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01163 · Published 2019-12-27 · No fix listed CWE-79