Subscribe to Comments, f69cd55925560294fe3e43bb5ca85d72219309c8

CVE, Research URL: f69cd55925560294fe3e43bb5ca85d72219309c8
Home page URL: Security reports for Subscribe to Comments
Application: Subscribe to Comments
Published on: Nov 16, 2009
Research Description: Subscribe to Comments [subscribe-to-comments] < 2.3 (closed) WordPress Subscribe to Comments Plugin 2.0 - Multiple Cross-Site Scripting Vulnerabilities Subscribe to Comments plugin is prone to a cross-site scripting. Application fails to sufficiently clean up user-supplied data. The attacker-supplied could run HTML or JavaScript code in the context of the affected site. In that way the attacker can steal cookie-based authentication credits. There are other attacks also possible.
Affected versions: Min -, max 2.3.
Status: vulnerable