Vulnerability Bulletins |
Zero-Day Stored XSS in Social Warfare |
|
| Affected software | Wordpress |
|
http://feedproxy.google.com/~r/sucuri/blog/~3/LIKIlIMIgq0/zero-day-stored-xss-in-social-warfare.html A zero-day vulnerability has just appeared in the WordPress plugin world, affecting over 70,000 sites using the Social Warfare plugin. The plugin is vulnerable to a Stored XSS (Cross-Site Scripting) vulnerability and has been removed from the plugin repository. Attacks can be conducted by any users visiting the site. A patch has been released […] More info: http://feedproxy.google.com/~r/sucuri/blog/~3/LIKIlIMIgq0/zero-day-stored-xss-in-social-warfare.html |
|