Description
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.
Remediation
References
Related Vulnerabilities
FrontAccounting Cross-site Request Forgery (CSRF) Vulnerability (CVE-2018-7176)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.2)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4193)
PHP Other Vulnerability (CVE-2011-3182)
WordPress Plugin Post Grid, List for WordPress-Content Views Cross-Site Scripting (1.6.1)