Unscored CVE-2010-4277 EUVD-2010-4250GHSA-4qwm-vc77-jcqw

Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to i…

Published Dec 22, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.

References

45486 vdb-entry
20101217 Embedded Video WordPress Plugin Cross Site Vulnerability (XSS) - CVE-2010-4277 mailing-list
embeddedvideoplugin-lembedded-xss(64214) vdb-entry