MitreCVELIST:CVE-2010-4875

HistoryOct 07, 2011 - 10:00 a.m.

CVE-2010-4875

2011-10-0710:00:00

mitre

www.cve.org

cross-site scripting

vodpod video gallery

wordpress

remote attackers

arbitrary web script

AI Score

5.8

Confidence

High

EPSS

0.008

Percentile

81.3%

JSON

Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.

References

osvdb.org/69084

packetstormsecurity.org/1011-exploits/wpvodpod-xss.txt

secunia.com/advisories/42195

securityreason.com/securityalert/8431

www.johnleitch.net/Vulnerabilities/WordPress.Vodpod.Video.Gallery.3.1.5.Reflected.Cross-site.Scripting/58

exchange.xforce.ibmcloud.com/vulnerabilities/63057