Description
Cross-site scripting (XSS) vulnerability in the filemanager in b2evolution before 5.2.1 allows remote attackers to inject arbitrary web script or HTML via the fm_filter parameter to blogs/admin.php.
Remediation
References
Related Vulnerabilities
Serendipity Other Vulnerability (CVE-2005-1451)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5868)
WordPress Plugin Get Recent Comments Cross-Site Scripting (2.0.6)
MySQL CVE-2015-4772 Vulnerability (CVE-2015-4772)
WordPress Plugin Autopilot SEO for WooCommerce Security Bypass (1.5.1)