WordPress Plugin Vulnerabilities

BuddyPress Extended Friendship Request - wp-admin/admin-ajax.php friendship_request_message Parameter XSS

Description

The BuddyPress Extended Friendship Request WordPress plugin was affected by a wp-admin/admin-ajax.php friendship_request_message Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
buddypress-extended-friendship-request
Fixed in 1.0.2

References

CVE
CVE-2013-4944

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
c8c4e62b-1954-4989-99b4-899e64597208

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2023-10-02
Title
Popup contact form <= 7.1 - Admin+ Stored XSS
Published
2024-03-25
Title
Sunshine Photo Cart < 3.1.2 - Reflected Cross-Site Scripting
Published
2020-04-05
Title
Car Rental System <= 1.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2022-05-03
Title
Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG
Published
2014-10-17
Title
Easy Contact Form Solution 1.0-1.6 - Stored Cross-Site Scripting (XSS)