CVE-2013-5711

Design Approval System WordPress plugin (before 3.7) is affected by an XSS in admin/walkthrough/walkthrough.php via the step parameter. The vulnerability allows remote attackers to inject arbitrary script/HTML. Public references include PoC payloads and vendor notes; patches were released to fix ...