CVE-2012-20005

The SocialFit plugin for WordPress (version 1.2.2 and earlier) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the unsanitized msg parameter within the popup.php file. Unauthenticated attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php using...