EUVD-2012-6613

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and...

CVE-2012-20005

The SocialFit plugin for WordPress (version 1.2.2 and earlier) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the unsanitized msg parameter within the popup.php file. Unauthenticated attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php using...

WordPress SocialFit - Cross-Site Scripting Detection

WordPress SocialFit is vulnerable to a cross-site scripting vulnerability via the 'msg' parameter because it fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress SocialFit is vulnerable to a cross-site scripting vulnerability via the 'msg' paramet...

Wordpress Plugins - SocialFit XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Plugin SocialFit - msg Cross-Site Scripting

WordPress Plugin SocialFit - msg Cross-Site Scripting source: https://www.securityfocus.com/bid/54320/info SocialFit plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress SocialFit Plugin - Cross Site Scripting

WordPress SocialFit plugin's "msg" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin SocialFit - 'msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54320/info SocialFit plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...