Twittee Text Tweet <= 1.0.8 - Reflected XSS
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 0.9%
exploitation probability
0.9%top 44% of all CVEs
observed exploitation
nono source reports it
The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.
Affected products
Unknown · Twittee Text Tweet