CVE-2011-4618 Advanced Text Widget <= 2.0.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 10.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplerealtytheme advanced text widget plugin | <= 2.0.1 | No fix listed |
| wordpress advanced-text-widget(WordPress) | < 2.0.2 | 2.0.2 |
References
- 20120417 Re: Wordpress advanced-text-widget Plugin Vulnerabilities exploit mailing-list
- plugins.trac.wordpress.org
- wordpress.org
- wordpress.org
- [oss-security] 20111219 Re: CVE-request: WordPress advanced-text-widget XSS advancedtext.php?page= mailing-list
- 20111121 Wordpress advanced-text-widget Plugin Vulnerabilities exploit mailing-list
- 50744 exploit vdb-entry
- advancedtextwidget-advancedtext-xss(71412) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org