Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-17T03:17:26.663Z
Reserved: 2013-05-30T00:00:00Z
Link: CVE-2013-3720

No data.

Status : Deferred
Published: 2013-05-31T12:20:25.877
Modified: 2025-04-11T00:51:21.963
Link: CVE-2013-3720

No data.