Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-05-31T10:00:00Z

Updated: 2024-09-17T03:17:26.663Z

Reserved: 2013-05-30T00:00:00Z

Link: CVE-2013-3720

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2013-05-31T12:20:25.877

Modified: 2013-08-27T12:58:29.837

Link: CVE-2013-3720

cve-icon Redhat

No data.