Skip to content
OpenAdvisories
Unscored CVE-2011-5307 EUVD-2011-5206GHSA-22w5-vw2x-wqp3

Cross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitr…

Published Jan 1, 2015 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in the PhotoSmash plugin 1.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

References