CVE-2012-2920

The CVE-2012-2920 entry involves a Cross-site Scripting (XSS) vulnerability in the WordPress User Photo plugin, specifically in the userphoto_options_page function of user-photo.php prior to version 0.9.5.2. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to...