CVE-2011-5307

Cross-site scripting XSS vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2011-5307

CVE-2011-5307 is a publicly known XSS vulnerability in the WordPress PhotoSmash plugin version 1.0.1, exposed via index.php where the action parameter can be exploited to inject arbitrary web scripts/HTML. The NVD entry lists a MEDIUM severity (CVSS2: AV:N/AC:M/Au:N/I:P/C:N, base 4.3) with no con...