Description
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34363 ↗
- http://www.securityfocus.com/bid/24037 ↗
- http://osvdb.org/37041 ↗
- http://osvdb.org/37040 ↗
- http://redlevel.org/wp-content/uploads/redoable.txt ↗
- http://www.securityfocus.com/archive/1/468892/100/0/threaded ↗
- http://secunia.com/advisories/25310 ↗
- http://securityreason.com/securityalert/2721 ↗