TI-2014-03782 CVE-2014-4596 · GHSA-vhpg-j2w4-997jMultiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) msg or (2) act pa…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2014-07-02 · No fix listed CWE-79