Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter.
References
Link | Resource |
---|---|
http://secunia.com/advisories/42544 | Vendor Advisory |
http://www.johnleitch.net/Vulnerabilities/WordPress.Safe.Search.0.7.Reflected.Cross-site.Scripting/66 | Exploit |
http://www.securityfocus.com/bid/45267 | Exploit |
http://osvdb.org/69762 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2010-12-09 13:00
Updated : 2010-12-17 23:07
NVD link : CVE-2010-4518
Mitre link : CVE-2010-4518
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
wordpress
- wordpress
wobeo
- wp-safe-search