Lucene search

K
patchstackAm!rPATCHSTACK:5267F7A3062592F701DBE6EDED1A0109
HistoryDec 06, 2011 - 12:00 a.m.

WordPress Pretty Link Plugin 1.5.2 - Cross Site Scripting

2011-12-0600:00:00
Am!r
patchstack.com
5

0.001 Low

EPSS

Percentile

36.1%

WordPressPretty Link plugin’s “pretty-bar.php” parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible.

Solution

           Update the plugin. 
CPENameOperatorVersion
shortlinks by pretty linksle1.5.2

0.001 Low

EPSS

Percentile

36.1%

Related for PATCHSTACK:5267F7A3062592F701DBE6EDED1A0109