Lucene search
+L

25 matches found

CVE
CVE
added 2013/01/24 1:0 a.m.81 views

CVE-2011-4618

The CVE-2011-4618 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Advanced Text Widget (file advancedtext.php) before version 2.0.2. The underlying issue is improper handling of the page parameter, allowing remote attackers to inject arbitrary web script or HTML ...

4.3CVSS6AI score0.10083EPSS
SaveExploits2References8Affected Software1
seebug.org
seebug.org
added 2011/11/22 12:0 a.m.43 views

WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability

No description provided by source. Islamic Republic Of Iran Security Team Www.IrIsT.Ir Wordpress advanced-text-widget Plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/advanced-text-widget/...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2011/11/21 12:0 a.m.32 views

WordPress Plugin Advanced Text Widget 2.0 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50744/info Advanced Text Widget plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.2AI score0.10083EPSS
SaveExploits2
Patchstack
Patchstack
added 2011/11/21 12:0 a.m.24 views

WordPress Advanced Text Widget Plugin 2.0 - Cross Site Scripting

WordPress Advanced Text Widget plugin's "page" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

4.3CVSS2AI score0.10083EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2011/11/21 12:0 a.m.22 views

WordPress Advanced Text Widget Plugin 2.0 - Cross Site Scripting

WordPress Advanced Text Widget plugin's "page" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

4.3CVSS2AI score0.10083EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder