CVE-2013-4241

CVE-2013-4241

Multiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) image, (3) url, or (4) testimonial parameter to the Testimonial form (hms-testimonials-addnew page); (5) date_format parameter to the Settings – Default form (hms-testimonials-settings page); (6) name parameter in a Save action to the Settings – Custom Fields form (hms-testimonials-settings-fields page); or (7) name parameter in a Save action to the Settings – Template form (hms-testimonials-templates-new page).

Source: CVE-2013-4241

댓글 남기기

이메일은 공개되지 않습니다. 필수 입력창은 * 로 표시되어 있습니다

Time limit is exhausted. Please reload the CAPTCHA.