CVE-2012-5346

The CVE-2012-5346 entry concerns the WordPress WP Live.php plugin (version 1.2.1) with a Cross‑Site Scripting (XSS) flaw triggered by the s parameter in wp-live.php. This allows remote attackers to inject arbitrary scripts/HTML in the victim’s browser. Several connected sources corroborate the XS...

CVE-2012-5346

Cross-site scripting XSS vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information...