WordPress Plugin Vulnerabilities
WP Smiley <= 1.4.1 - CSRF & Cross-Site Scripting (XSS)
Description
Cross-Site scripting (XSS) in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more parameter to wp-admin/options-general.php.
Affects Plugins
No known fix References
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2015-05-29 (about 10 years ago)
Added
2015-06-19 (about 10 years ago)
Last Updated
2019-11-28 (about 6 years ago)
WPScan 