CVE-2012-3414

CVE-2012-3414 describes a cross-site scripting (XSS) vulnerability in the SWFUpload component (movieName parameter) used by SWFUpload 2.2.0.1 and earlier, and deployed in products such as WordPress ≤ 3.3.1/3.3.2 and TinyMCE Image Manager 1.1. The underlying cause is unsafe handling via ExternalIn...