WassUp Plugin CVE-2012-2633 Cross-Site Scripting Vulnerability
BID:73860
Info
WassUp Plugin CVE-2012-2633 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73860 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-2633 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 15 2012 12:00AM |
| Updated: | Jun 15 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
WordPress WassUp Plugin 1.8.3 WordPress WassUp Plugin 1.8.3 WordPress WassUp Plugin 1.4.3 WordPress WassUp Plugin 1.8.1 WordPress WassUp Plugin 1.8 WordPress WassUp Plugin 1.7.2.1 WordPress WassUp Plugin 1.7.2 WordPress WassUp Plugin 1.4 |
| Not Vulnerable: | |
Discussion
WassUp Plugin CVE-2012-2633 Cross-Site Scripting Vulnerability
WassUp Plugin is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
WassUp Plugin is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
Solution / Fix
WassUp Plugin CVE-2012-2633 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]