CVE-2013-2287
Beschrijving NL
Meerdere cross-site scripting (XSS) -kwetsbaarheden in views/notify.php in de Uploader-plug-in 1.0.4 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) meldings- of (2) blogparameter.
Origineel (Engels) tonen
Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or (2) blog parameter.