CVE-2013-7482

The reflex-gallery plugin before 1.4.3 for WordPress has XSS...

CVE-2013-7482

The reflex-gallery plugin before 1.4.3 for WordPress has XSS...

WordPress ReFlex Gallery Plugin <= 3.1.3 - Unrestricted File Upload

This vulnerability is in admin/scripts/FileUploader/php.php. It allows an attacker to execute arbitrary PHP code by uploading a file with a PHP extension. And then an attacker can access it via a direct request to the file in uploads/ directory. Solution Update the plugin...