TI-2014-03992 CVE-2014-4854 · GHSA-mp7f-6c2f-45xmCross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for…Priority LOW 23Cross-site scripting (XSS) vulnerability in the WP Construction Mode plugin 1.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wuc_logo parameter in a save action to wp-admin/admin.p…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2014-07-10 · No fix listed CWE-79