WordPress Plugin Vulnerabilities

Quick Post Widget 1.9.1 - Multiple Cross-Site Scripting (XSS)

Description

The quick-post-widget WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
quick-post-widget
No known fix

References

CVE
CVE-2012-4226
URL
https://seclists.org/bugtraq/2012/Aug/66

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
ef806113-0b61-42fc-8a94-538eb1b0f93d

Timeline

Publicly Published
2012-08-10 (about 11 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2023-01-04
Title
Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode
Published
2022-06-06
Title
Google Authenticator < 1.0.8 - Admin+ Stored Cross-Site Scripting
Published
2015-04-16
Title
Citizen Space <= 1.1 - Reflected Cross-Site Scripting (XSS)
Published
2023-01-05
Title
Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS
Published
2020-07-10
Title
InJob < 3.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)