Steve Clay

2 exploits Active since Feb 2014
CVE-2013-0234 WRITEUP WRITEUP
Elgg < 1.7.17 and 1.8.x < 1.8.13 - Cross-Site Scripting via Twitter Widget params[twitter_username] Parameter
Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_username] parameter to action/widgets/save.
CVE-2013-0234 WRITEUP WRITEUP
Elgg < 1.7.17 and 1.8.x < 1.8.13 - Cross-Site Scripting via Twitter Widget params[twitter_username] Parameter
Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_username] parameter to action/widgets/save.