Dynamic Widgets, bcd167c7824b22ce28b0a755c39fc633d83acfb4

CVE, Research URL: bcd167c7824b22ce28b0a755c39fc633d83acfb4
Home page URL: Security reports for Dynamic Widgets
Application: Dynamic Widgets
Published on: May 15, 2012
Research Description: Dynamic Widgets [dynamic-widgets] < 1.5.2 WordPress Dynamic Widgets Plugin 1.5.1 - Cross Site Scripting WordPress PodPress plugin's "themes.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible. Update the plugin.
Affected versions: max 1.5.2.
Status: vulnerable