###################### # Exploit Title : Wordpress custom-banners 1.2.2.2 Cross Site Scripting # Exploit Author : Ashiyane Digital Security Team # Vendor Homepage : http://wordpress.org/plugins/custom-banners/ # Software Link : http://downloads.wordpress.org/plugin/custom-banners.zip # Date : 2014-06-28 # Tested on : Windows 7 / Mozilla Firefox ###################### # Vulnerable code :

Email Address	This is the e-mail address that you used when you registered the plugin.

###################### Exploit Code: ##################### Discovered By : ACC3SS #####################