Cross-site scripting (XSS) vulnerability in widget_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wp_post_id parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-09-17T03:17:26.663Z

Reserved: 2013-05-30T00:00:00Z

Link: CVE-2013-3720

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2013-05-31T12:20:25.877

Modified: 2025-04-11T00:51:21.963

Link: CVE-2013-3720

cve-icon Redhat

No data.