CVE-2012-5346

The CVE-2012-5346 entry concerns the WordPress WP Live.php plugin (version 1.2.1) with a Cross‑Site Scripting (XSS) flaw triggered by the s parameter in wp-live.php. This allows remote attackers to inject arbitrary scripts/HTML in the victim’s browser. Several connected sources corroborate the XS...