The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f
and t
parameter found in the ~/titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.
CPE | Name | Operator | Version |
---|---|---|---|
border_loading_bar | le | 1.0.1 |