Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin

Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...

CVE-2013-6342

CVE-2013-6342 concerns a Cross-Site Scripting (XSS) in the WordPress Tweet Blender plugin prior to 4.0.2. The issue arises from insufficient sanitization of the tb_tab_index parameter submitted to /wp-admin/options-general.php, allowing a remote attacker to inject arbitrary script or HTML in the ...

WordPress Tweet Blender 4.0.1 Cross Site Scripting Vulnerability

WordPress Tweet Blender plugin version 4.0.1 suffers from a cross site scripting vulnerability. Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor...

WordPress Tweet Blender 4.0.1 Cross Site Scripting

Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...