A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. Using CWE to declare the problem leads to CWE-79. The weakness was presented 01/02/2014 as a07b7b08084b9b85859f3968ce7fde0fd1fcbba3. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2014-125111. The attack may be launched remotely. There are no technical details available. There is no exploit available. The current price for an exploit might be approx. USD $0-$5k at the moment. The MITRE ATT&CK project declares the attack technique as T1059.007. It is declared as not defined. As 0-day the estimated underground price was around $0-$5k. Upgrading to version 2.0.9 is able to address this issue. The name of the patch is a07b7b08084b9b85859f3968ce7fde0fd1fcbba3. The bugfix is ready for download at github.com. It is recommended to upgrade the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability.