Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.
- http://www.waraxe.us/advisory-59.html
- https://github.com/20142995/nuclei-templates