TI-2014-03777 CVE-2014-4591 · GHSA-h2qc-2x66-h864Cross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image…Priority LOW 23Cross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_id parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01629 · Published 2014-07-02 · No fix listed CWE-79