WordPress Plugin Vulnerabilities

WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS

Description

The WP Forum Server WordPress plugin was affected by a fs-admin/fs-admin.php Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
forum-server
No known fix

References

CVE
CVE-2012-6622
URL
https://packetstormsecurity.com/files/#112703/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
860c3166-0a19-421a-bc48-111aaaf2eabe

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-10-15
Title
Edwiser Bridge < 3.0.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2024-10-31
Title
Genoo < 6.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-12-03
Title
Intro Tour Tutorial DeepPresentation < 6.5.3 - Reflected Cross-Site Scripting
Published
2024-10-09
Title
Download Manager < 3.3.00 - Contributor+ Stored XSS
Published
2025-08-19
Title
Raptive Ads < 3.9.0 - Reflected Cross-Site Scripting