Pods – Custom Content Types and Fields, CVE-2014-7956

CVE, Research URL: CVE-2014-7956
Home page URL: Security reports for Pods – Custom Content Types and Fields
Application: Pods – Custom Content Types and Fields
Published on: Jan 15, 2015
Research Description: Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php.
Affected versions: Min -, max 2.5.1.2.
Status: vulnerable

Pods &#8211; Custom Content Types and Fields, CVE-2014-7956