WordPress CVEs

Description

Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected products and versions

• n/a n/a — Versions not specified

References

• archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-04/0119.html Exploit
• plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset?reponame=&new=466102%40advanced-text-widget&old=465828%40advanced-text-widget
• wordpress.org http://wordpress.org/extend/plugins/advanced-text-widget/changelog/
• wordpress.org http://wordpress.org/support/topic/wordpress-advanced-text-widget-plugin-cross-site-scripting-vulnerabilities
• www.openwall.com http://www.openwall.com/lists/oss-security/2011/12/19/6
• www.securityfocus.com http://www.securityfocus.com/archive/1/520589 Exploit
• www.securityfocus.com http://www.securityfocus.com/bid/50744 Exploit
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/71412
• nvd.nist.gov Official NVD record