CVE-2012-3414 | WordPress up to 3.3.1 swfupload.swf "ExternalInterfacecall" movieName cross site scripting (ID 122399 / EDB-37470)
A vulnerability was found in WordPress up to 3.3.1 and classified as problematic. Affected by this issue is the function "ExternalInterfacecall" of the file swfupload.swf. The manipulation of the argument movieName leads to cross site scripting.
This vulnerability is handled as CVE-2012-3414. The attack may be launched remotely. Furthermore, there is an exploit available.