Twitter Friends Widget Plugin up to 3.1 on WordPress Parameter twitter-friends-widget.php pmc_TF_user/pmc_TF_password cross site scripting
A vulnerability, which was classified as problematic, has been found in Twitter Friends Widget Plugin up to 3.1 on WordPress