CVE-2012-10007

The CVE concerns madgicweb BuddyStream Plugin for WordPress, affecting versions up to 3.2.7. The flaw originates from an unknown function in ShareBox.php, where manipulation of the content/link/shares parameter enables cross-site scripting. It can be exploited remotely. The issue is mitigated by ...