CVE-2011-4955

The CVE-2011-4955 entries in Connected documents confirm a cross-site scripting (XSS) vulnerability in the WordPress bSuite plugin prior to version 5 alpha 3. The flaw resides in ui_stats.php, exploitable by supplying arbitrary script or HTML via the (1) s or (2) p parameters to index.php, enabli...