CVE-2013-1758

Name of the Vulnerable Software and Affected Versions Marekkis Watermark plugin version 0.9.2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the pfad parameter to the "wp-admin/options-general.php" API endpoint.

Recommendations For Marekkis Watermark plugin version 0.9.2, consider disabling access to the wp-admin/options-general.php endpoint until a patch is available, or avoid using the pfad parameter in this endpoint to minimize the risk of exploitation.