EUVD-2012-1029

Malware in sbrugna...

CVE-2012-10007

A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares leads to cross site scripting. The...

Cross site scripting

A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares leads to cross site scripting. The...

CVE-2012-10007

The CVE concerns madgicweb BuddyStream Plugin for WordPress, affecting versions up to 3.2.7. The flaw originates from an unknown function in ShareBox.php, where manipulation of the content/link/shares parameter enables cross-site scripting. It can be exploited remotely. The issue is mitigated by ...

CVE-2012-10007: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares leads to cross site scripting. The...