Emag Marketplace Connector < 1.0.1 - Reflected Cross-Site Scripting
mediumThe Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filtered correctly.
- CVSS:
- 6.1
- Affected:
- up to 1.0.1
- Fixed in:
- 1.0.1
- Disclosed:
- Nov 21, 2017