CVE-2010-4747

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-03-01 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pluginurl parameter.

Affected products

Ahmattox Processing Embed Plugin: 0.5

References

http://secunia.com/advisories/42545
http://www.johnleitch.net/Vulnerabilities/WordPress.Processing.Embed.0.5.Reflected.Cross-site.Scripting/65
http://www.osvdb.org/69764
http://www.securityfocus.com/bid/45266
https://exchange.xforce.ibmcloud.com/vulnerabilities/63761
http://secunia.com/advisories/42545
http://www.johnleitch.net/Vulnerabilities/WordPress.Processing.Embed.0.5.Reflected.Cross-site.Scripting/65
http://www.osvdb.org/69764
http://www.securityfocus.com/bid/45266
https://exchange.xforce.ibmcloud.com/vulnerabilities/63761

Get alerted when CVE-2010-4747 or the next vulnerability affects your stack