Skip to content
OpenAdvisories

Vendor

Łukasz Więcek

1 known vulnerabilities.

Products

SocialFit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2012-20005

    SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter

    SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/p…

    Łukasz Więcek SocialFit Web / CMS