Published: 02/02/2011 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the rss_url parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pleer rss_feed_reader 0.1

Debian Bug report logs - #611940 magpierss: CVE-2011-0740 Cross-site scripting vulnerability in scripts/magpie_slashboxphp Package: magpierss; Maintainer for magpierss is Debian PHP PEAR Maintainers <pkg-php-pear@listsaliothdebianorg>; Reported by: Jonathan Wiltshire <jmw@debianorg> Date: Thu, 3 Feb 2011 22:51:0 ...

source: wwwsecurityfocuscom/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This c ...

CWE-79 http://osvdb.org/70644 http://www.securityfocus.com/bid/45997 http://www.autosectools.com/Advisories/WordPress.RSS.Feed.Reader.for.WordPress.0.1_Reflected.Cross-site.Scripting_82.html http://secunia.com/advisories/43071 https://exchange.xforce.ibmcloud.com/vulnerabilities/64949 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611940 https://nvd.nist.gov https://www.exploit-db.com/exploits/35261/

CVE-2011-0740

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect