Featurific For WordPress 1.6.2 - Cross-Site Scripting

A cross-site scripting vulnerability in cachedimage.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter. id: CVE-2011-5265 info: name: Featurific For WordPress 1.6.2 - Cross-Site Scripting author:...

CVE-2011-5265

CVE-2011-5265 is a cross-site scripting (XSS) vulnerability in Featurific For WordPress plugin, specifically in cached_image.php, where the parameter snum can be exploited to inject arbitrary script/HTML. The Nuclei template corroborates this issue for Featurific For WordPress 1.6.2. Impact descr...