TI-2014-03786 CVE-2014-4600 · GHSA-jhhq-6jp7-v587Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) l…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01618 · Published 2014-07-02 · No fix listed CWE-79