Wordpress Recommend-a-friend 插件-raf_form.php文件current_url参数-跨站脚本漏洞

No description provided by source...

CVE-2013-7276

The CVE-2013-7276 entry concerns the WordPress plugin “Recommend to a friend” (plugin version 2.0.2) with a reflected XSS in inc/raf_form.php via the current_url parameter. The underlying cause is that user-supplied current_url is reflected, allowing remote attackers to inject arbitrary script/HT...