CVE-2013-5711 – Design Approval System <= 3.6 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2013-5711

07 Sep 2013 — Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step parameter. Vulnerabilidad Cross-site scripting (XSS) en admin/walkthrough/walkthrough.php en el plugin Design Approval System (anteriores a 3.7) para Wordpress, permite a un atacante remoto inyectar arbitrariamente script web o HTML a través del parámetro "step". WordPress Design-Approval-System... • http://archives.neohapsis.com/archives/bugtraq/2013-09/0055.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •