Security Advisory

CVE-2013-7276

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-01-08 15:00:00
Last updated 2024-08-06 18:01:20
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the current_url parameter.