WP-Footnotes <= 2.2 - Multiple Cross-Site Scripting
mediumMultiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_set...
- CVSS:
- 6.1
- Affected:
- up to 2.2
- Fixed in:
- 3.0
- Disclosed:
- Feb 2, 2008