CVE-2012-20003

The Custom Tables plugin for WordPress (versions before 3.4.6 ) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the lack of sanitization for the 'key' parameter within the iframe.php component. Unauthenticated attackers can craft GET requests to /wp-content/plugins...