Lucene search

K
patchstackMustLivePATCHSTACK:20C4BC61BCF6A613128D97F3D7DC7141
HistoryApr 21, 2012 - 12:00 a.m.

WordPress SWFUpload Plugin <= 2.2.0.1 - XSS #2

2012-04-2100:00:00
MustLive
patchstack.com
12

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Because of this vulnerability in swfupload.swf, the attackers can inject arbitrary web script or HTML via the “buttonText” parameter.

Solution

           Update the plugin. 
CPENameOperatorVersion
swfuploadle2.2.0.1

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C