WordPress Plugin Vulnerabilities

WP-Cumulus - Cross Site Scripting Vulnerabily

Description

The wp-cumulus WordPress plugin was affected by a Cross Site Scripting Vulnerabily security vulnerability.

Affects Plugins

Plugin icon
wp-cumulus
Fixed in 1.23

References

URL
https://seclists.org/fulldisclosure/2011/Nov/340

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
a374e9ef-dd36-45ad-94ab-a02853b1fbac

Timeline

Publicly Published
2011-11-20 (about 12 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2022-06-16
Title
WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
Published
2023-01-30
Title
GS Books Showcase < 1.3.1 - Contributor+ Stored XSS
Published
2023-08-07
Title
Leyka < 3.30.3 - Reflected XSS
Published
2024-02-02
Title
Scroll Triggered Box <= 2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2024-03-28
Title
Mailster < 2.0.0 - Reflected Cross-Site Scripting