Recommend a friend 2.0.2 - inc/raf_form.php current_url Parameter Reflected XSS

The Recommend to a friend WordPress plugin was affected by an inc/rafform.php currenturl Parameter Reflected XSS security vulnerability...

CVE-2013-7276

The CVE-2013-7276 entry concerns the WordPress plugin “Recommend to a friend” (plugin version 2.0.2) with a reflected XSS in inc/raf_form.php via the current_url parameter. The underlying cause is that user-supplied current_url is reflected, allowing remote attackers to inject arbitrary script/HT...