25 matches found
CVE-2010-4779
Cross-site scripting XSS vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouchsettings parameter to include/adsense-new.php. NOTE: some of these details are obtained from...
Cross site scripting
Cross-site scripting XSS vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouchsettings parameter to include/adsense-new.php. NOTE: some of these details are obtained from...
CVE-2010-4779
Cross-site scripting XSS vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wptouchsettings parameter to include/adsense-new.php. NOTE: some of these details are obtained from...
CVE-2010-4779
The CVE-2010-4779 entry concerns the WPtouch WordPress plugin, where an XSS flaw exists in lib/includes/auth.inc.php affecting WPtouch versions 1.9.19.4 and 1.9.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via the wptouch_settings parameter to include/adsense-n...
XSS in WPTouch wordpress plugin
Vulnerability ID: HTB22698 Reference: http://www.htbridge.ch/advisory/xssinwptouchwordpressplugin.html Product: WPTouch wordpress plugin Vendor: BraveNewCode Inc http://www.bravenewcode.com/ Vulnerable Version: 1.9.19.4 Vendor Notification: 16 November 2010 Vulnerability Type: XSS Cross Site...