Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Blaze Slide Show For Wordpress Plugin | — | Update blaze-slide-show-for-wordpress plugin to version 2.6, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Debian | — | Upgrade wordpress | Jul 30, 2024 | Jul 19, 2013 |
| Flash Album Gallery Plugin | — | Update flash-album-gallery plugin to version 2.12, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Mac Dock Gallery Plugin | — | Update mac-dock-gallery plugin to version 3.0, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Nextgen Gallery Plugin | — | Update nextgen-gallery plugin to version 1.9.8, or a newer patched version | May 15, 2025 | Jun 14, 2012 |
| Power Zoomer Plugin | — | Update power-zoomer plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Slide Show Pro Plugin | — | Update slide-show-pro plugin to version 2.4, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Smart Slide Show Plugin | — | Update smart-slide-show plugin to version 2.4, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Spotlightyour Plugin | — | Update spotlightyour plugin to version 4.4, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Ultimate Tinymce Plugin | — | Update ultimate-tinymce plugin to version 3.6, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wordpress | — | Upgrade Wordpress to version 3.3.2 | May 16, 2017 | Jul 19, 2013 |
| Wp 3dbanner Rotator Plugin | — | Update wp-3dbanner-rotator plugin to version 2.2, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp 3dflick Slideshow Plugin | — | Update wp-3dflick-slideshow plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Bliss Gallery Plugin | — | Update wp-bliss-gallery plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Carouselslideshow Plugin | — | Update wp-carouselslideshow plugin to version 3.11, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Dreamworkgallery Plugin | — | Update wp-dreamworkgallery plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Flipslideshow Plugin | — | Update wp-flipslideshow plugin to version 2.2, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Homepage Slideshow Plugin | — | Update wp-homepage-slideshow plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Image News Slider Plugin | — | Update wp-image-news-slider plugin to version 3.5, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Levoslideshow Plugin | — | Update wp-levoslideshow plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Matrix Gallery Plugin | — | Update wp-matrix-gallery plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Powerplaygallery Plugin | — | Update wp-powerplaygallery plugin to version 3.2, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Royal Gallery Plugin | — | Update wp-royal-gallery plugin to version 2.1, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Superb Slideshow Plugin | — | Update wp-superb-slideshow plugin to version 2.4, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Vertical Gallery Plugin | — | Update wp-vertical-gallery plugin to version 2.3, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wp Yasslideshow Plugin | — | Update wp-yasslideshow plugin to version 3.4, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
| Wysija Newsletters Plugin | — | Update wysija-newsletters plugin to version 2.1.7, or a newer patched version | May 15, 2025 | Nov 9, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub