CVE-2012-6623 | BDVDB-2026-59435 Detail

Description#

Cross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://plugins.trac.wordpress.org/changeset/572188
http://wordpress.org/extend/plugins/forum-server/changelog/
http://secunia.com/advisories/49167
http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html

Exploit#

No public exploit known

History#

Version 12014-01-16Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.