3 matches found
CVE-2012-1834
Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...
CVE-2012-1834
Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...
CVE-2012-1834
CVE-2012-1834 concerns the WordPress plugin CMS Tree Page View. The vulnerability is a persistent XSS in the cms_tpv_admin_head function (functions.php) that allows an attacker to inject arbitrary script/HTML via the cms_tpv_view parameter sent to wp-admin/options-general.php. Affected versions a...