TI-2013-05121 CVE-2013-6010 · GHSA-44p4-8hp3-824hCross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for…Priority LOW 24Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02041 · Published 2013-10-03 · No fix listed CWE-79
