Cross-Site Scripting Vulnerability in WP-Cumulus Plugin for WordPress
CVE-2009-4169

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP-cumulus
Vendor
CVE Published:
2 December 2009

Summary

The WP-Cumulus Plugin for WordPress contains a cross-site scripting (XSS) vulnerability that permits remote attackers to inject arbitrary web scripts or HTML into web pages. This can lead to unauthorized actions or exposure of sensitive information when end-users interact with compromised elements of the website. It is crucial for users of the WP-Cumulus Plugin to upgrade to at least version 1.22 to mitigate this risk.

References

http://www.roytanck.com/2009/09/27/wp-cumulus-1-22-fixes-...
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/3322
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/37102
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.