WP-RSS-Spreadshirt-3DCube-Gallery <= 1.3 - Cross-Site Scripting
mediumCross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin through version 1.3 for WordPress allows remote attackers to execute arbitrary web script or HTML via url parameter.
- CVSS:
- 6.1
- Affected:
- up to 1.3
- Fix:
- No patched version reported
- Disclosed:
- May 25, 2014