PT-2013-1480 · WordPress · Featurific For Wordpress
CVE-2011-5265
·
Published
2013-02-12
·
Updated
2018-10-09
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Featurific For WordPress plugin version 1.6.2
Description
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the
snum parameter in the cached image.php file.Recommendations
For Featurific For WordPress plugin version 1.6.2, avoid using the
snum parameter in the cached image.php file until the issue is resolved.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Featurific For Wordpress