CVE-2011-4618

Summary

Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://plugins.trac.wordpress.org/changeset?reponame=&new=466102%40advanced-text-widget&old=465828%40advanced-text-widget
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71412
• http://www.openwall.com/lists/oss-security/2011/12/19/6
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0119.html
• http://www.securityfocus.com/bid/50744
• http://www.securityfocus.com/archive/1/520589
• http://wordpress.org/extend/plugins/advanced-text-widget/changelog/
• http://wordpress.org/support/topic/wordpress-advanced-text-widget-plugin-cross-site-scripting-vulnerabilities

References

• http://plugins.trac.wordpress.org/changeset?reponame=&new=466102%40advanced-text-widget&old=465828%40advanced-text-widget
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71412
• http://www.openwall.com/lists/oss-security/2011/12/19/6
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0119.html
• http://www.securityfocus.com/bid/50744
• http://www.securityfocus.com/archive/1/520589
• http://wordpress.org/extend/plugins/advanced-text-widget/changelog/
• http://wordpress.org/support/topic/wordpress-advanced-text-widget-plugin-cross-site-scripting-vulnerabilities

• ←Previous
• Next→