Lucidcrew

#19321of 60,590
16.1Total CVSS
Vulnerabilities · 3
Medium
2
High
1
PT-2014-2391
2014-01-16
4.3
CVE-2012-6622
WordPress
Forumpress Wp Forum Server
The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the `groupid` parameter in an "editgroup" action or the `usergroup id` parameter in an "edit usergroup" action.
PT-2014-2392
2014-01-16
4.3
CVE-2012-6623
WordPress
Forumpress Wp Forum Server
The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the `groupid` parameter in an 'addforum' action to 'wp-admin/admin.php'.
PT-2014-2394
2014-01-16
7.5
CVE-2012-6625
WordPress
Forumpress Wp Forum Server
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `groupid` parameter in an "editgroup" action.