CVE-2017-6102 – Rockhoist Badges <= 1.2.2 - Authenticated Stored Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-6102

02 Mar 2017 — Persistent XSS in wordpress plugin rockhoist-badges v1.2.2. XSS persistente en el plugin rockhoist-badges v1.2.2 de wordpress. Persistent XSS in wordpress plugin rockhoist-badges v1.2.2 via badge description and title fields. • http://www.securityfocus.com/bid/96533 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •