CVE-2012-2759

CVE-2012-2759 affects the WordPress plugin Login With Ajax (aka login-with-ajax). The vulnerability is a cross-site scripting (XSS) flaw in login-with-ajax.php, exploitable via the callback parameter in a lostpassword action to wp-login.php. It concerns versions before 3.0.4.1. Impact stated in t...

CVE-2012-2759

Cross-site scripting XSS vulnerability in login-with-ajax.php in the Login With Ajax aka login-with-ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php...