4.3
CVSSv2

CVE-2009-4168

Published: 02/12/2009 Updated: 10/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin prior to 1.23 for WordPress and the Joomulus module 2.0 and previous versions for Joomla!, allows remote malicious users to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in prior to 1.23 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the tagcloud parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

roytanck wp-cumulus 1.16

roytanck wp-cumulus 1.15

roytanck wp-cumulus 1.14

roytanck wp-cumulus 1.03

roytanck wp-cumulus 1.02

roytanck wp-cumulus 1.18

roytanck wp-cumulus 1.17

roytanck wp-cumulus 1.05

roytanck wp-cumulus 1.04

roytanck wp-cumulus

roytanck wp-cumulus 1.2.1

roytanck wp-cumulus 1.13

roytanck wp-cumulus 1.12

roytanck wp-cumulus 1.01

roytanck wp-cumulus 1.00

roytanck wp-cumulus 1.20

roytanck wp-cumulus 1.19

roytanck wp-cumulus 1.11

roytanck wp-cumulus 1.10

Exploits

source: wwwsecurityfocuscom/bid/37100/info The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected ...