Cross site scripting

Cross-site scripting XSS vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the exclmanual parameter in the xclonershow page to wpadmin/plugins.php...

PT-2015-6523

Name of the Vulnerable Software and Affected Versions XCloner plugin version 3.1.2 for WordPress Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the excl manual parameter in the "xcloner show" page to "wpadmin/plugins.php"...