CVE-2013-0734 | BDVDB-2026-60636 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/secunia_research/2013-3
http://secunia.com/advisories/52167
http://osvdb.org/90433
https://exchange.xforce.ibmcloud.com/vulnerabilities/82187
http://osvdb.org/90432
http://www.securityfocus.com/bid/58059

Exploit#

No public exploit known

History#

Version 12014-03-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.