WordPress.org

1. Joe Banks
   Member
   Posted 1 year ago #

   11.13.21 CVE: CVE-2011-0760

   Platform: Web Application - Cross Site Scripting

   Title: WordPress Related Posts Plugin Multiple Cross-Site Scripting
   Vulnerabilities

   Description: Related Posts is a plugin for WordPress. WordPress is a
   web-based publishing application. The application is exposed to
   multiple cross-site scripting issues because it fails to sufficiently
   sanitize user-supplied input. Related Posts version 1.0 is affected.

   Ref: http://wordpress.org/extend/plugins/wp-related-posts/

   Source: http://www.sans.org/newsletters/risk/

2. henrisalo
   Member
   Posted 6 months ago #

   Has this been fixed yet?

3. henrisalo
   Member
   Posted 6 months ago #

   http://osvdb.org/show/osvdb/74892
   http://secunia.com/advisories/43777
   http://archives.neohapsis.com/archives/fulldisclosure/2011-03/0205.html

4. nessus
   Member
   Posted 4 months ago #

   Has been updated.

5. henrisalo
   Member
   Posted 4 months ago #

   Version 1.1 Security update. Added XSS and CSRF protection.

6. Mark (podz)
   Support Maven
   Posted 4 months ago #

   Title edited.

Topic Closed

This topic has been closed to new replies.