CVE-2017-6102 – Rockhoist Badges <= 1.2.2 - Authenticated Stored Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-6102

Persistent XSS in wordpress plugin rockhoist-badges v1.2.2. XSS persistente en el plugin rockhoist-badges v1.2.2 de wordpress. Persistent XSS in wordpress plugin rockhoist-badges v1.2.2 via badge description and title fields. • http://www.securityfocus.com/bid/96533 http://www.vapidlabs.com/advisory.php?v=176 https://wpvulndb.com/vulnerabilities/8763 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •