WordPress Wu Rating Plugin <= 1.0 12319 - XSS

2014-06-2300:00:00

Anant Shrivastava

patchstack.com

0.001 Low

EPSS

Percentile

50.0%

Because of this vulnerability in wu-ratepost.php, the attackers can inject arbitrary web script or HTML via the “v” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
wu ratingle1.0 12319

CPE	Name	Operator	Version
	wu rating	le	1.0 12319

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4601

0.001 Low

EPSS

Percentile

50.0%

Related for PATCHSTACK:5B999E42BBF8AA547B61A15863390E8E