mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-26 11:45:47 +00:00
685 B
685 B
CVE-2011-3841
Description
Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.
POC
Reference
No PoCs from references.