podPress <= 8.8.10.17 - Cross-Site Scripting via playerID
mediumCross-site Scripting (XSS) in WordPress podPress Plugin 8.8.10.17 (and possibly more) could allow remote attackers to inject arbitrary web script or html via the 'playerID' parameter.
- CVSS:
- 6.1
- Affected:
- up to 8.8.10.17
- Fix:
- No patched version reported
- Disclosed:
- Mar 11, 2013