CVE-2021-38322: Improper Neutralization of Input During Web Page Generation

The Twitter Friends Widget WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.1...

PT-2021-22040

Name of the Vulnerable Software and Affected Versions: Twitter Friends Widget WordPress plugin versions up to and including 3.1 Description: The issue allows attackers to inject arbitrary web scripts via the pmc TF user and pmc TF password parameters found in the /twitter-friends-widget.php file...