CVE-2010-4825

CVE-2010-4825

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/42542 https://exchange.xforce.ibmcloud.com/vulnerabilities/63942 http://www.johnleitch.net/Vulnerabilities/WordPress.Twitter.Feed.0.3.1.Reflected.Cross-site.Scripting/68 http://www.osvdb.org/69760 http://www.securityfocus.com/bid/45294