CVE-2009-4169

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP-cumulus
Vendor
CVE Published:
2 December 2009

Summary

Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-...
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3322
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/37102
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.