CVE-2012-5229: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in css/gallery-css.php in the Slideshow Gallery2 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the border parameter...

WordPress Slideshow Gallery 2 Cross SIte Scripting

Exploit Title: Wordpress Slideshow Gallery 2 Cross Site Scripting Exploit Date: 26 January 2011 Author: Bret Hawk Software Link: http://wordpress.org/extend/plugins/slideshow-gallery-2/ Version: 2xxx and Prior Tested on: Linux Unix The Wordpress slideshow Gallery2 plugin suffers cross site...