BP Group Documents, 976d9971f284e7e9d132cce6a128376d66572446

CVE, Research URL: 976d9971f284e7e9d132cce6a128376d66572446
Home page URL: Security reports for BP Group Documents
Application: BP Group Documents
Published on: Oct 04, 2013
Research Description: BP Group Documents [bp-group-documents] < 1.2.2 BP Group Documents <= 1.2 - Stored Cross-Site Scripting The BP Group Documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated Admin+ attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.2.2.
Status: vulnerable