CVE

Id
60681  
CVE No.
CVE-2013-0734  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611051 60681 CVE-2013-0734 MISC:http://secunia.com/secunia_research/2013-3  View
611052 60681 CVE-2013-0734 BID:58059  View
611053 60681 CVE-2013-0734 URL:http://www.securityfocus.com/bid/58059  View
611054 60681 CVE-2013-0734 OSVDB:90432  View
611055 60681 CVE-2013-0734 URL:http://osvdb.org/90432  View
611056 60681 CVE-2013-0734 OSVDB:90433  View
611057 60681 CVE-2013-0734 URL:http://osvdb.org/90433  View
611058 60681 CVE-2013-0734 SECUNIA:52167  View
611059 60681 CVE-2013-0734 URL:http://secunia.com/advisories/52167  View
611060 60681 CVE-2013-0734 XF:wp-mingleforum-index-admin-xss(82187)  View

Related JVN