Description

Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.

Remediation

References

CVE-2012-5911

Related Vulnerabilities

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Multiple Vulnerabilities (2.2.4)

WordPress Plugin User Activity Log Multiple Cross-Site Scripting Vulnerabilities (1.4.6)

PHP Other Vulnerability (CVE-2015-4603)

WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.4.17)

WordPress Plugin My Calendar Cross-Site Scripting (2.3.28)

Severity

Medium

Classification

CVE-2012-5911 CWE-707

Tags

Missing Update Known Vulnerabilities