TI-2014-03772 CVE-2014-4586 · GHSA-ccqv-9vx6-r54fMultiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to (1) football_classific…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01629 · Published 2014-10-27 · No fix listed CWE-79
