| Package | Affected versions | Patched versions |
|---|---|---|
| mingle-forum | = 1.0.00= 1.0.01= 1.0.02= 1.0.03= 1.0.04= 1.0.05= 1.0.06= 1.0.07= 1.0.08= 1.0.09= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.20= 1.0.21= 1.0.21.1= 1.0.22= 1.0.23= 1.0.23.1= 1.0.23.2= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.28.1= 1.0.28.2= 1.0.29= 1.0.30= 1.0.31= 1.0.31.1= 1.0.31.2= 1.0.31.3= 1.0.31.4= 1.0.32= 1.0.32.1≤ 1.0.33 |
Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words parameter in a search action to wpf.class.php or (2) togroupusers parameter in an add_user_togroup action to fs-admin/fs-admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free