TI-2014-03739 CVE-2014-4552 · GHSA-wx5g-hmg5-85r4Cross-site scripting (XSS) vulnerability in…Priority LOW 23Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to inject arbitrary web…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01629 · Published 2014-07-02 · No fix listed CWE-79