CVE-2009-4168

Опубликовано: 02 дек. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:roytanck:wp-cumulus:*:*:*:*:*:*:*:*

Версия до 1.22 (включая)

cpe:2.3:a:roytanck:wp-cumulus:1.00:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.01:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.02:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.03:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.04:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.05:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.10:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.11:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.12:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.13:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.14:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.15:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.16:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.17:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.18:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.19:*:*:*:*:*:*:*

cpe:2.3:a:roytanck:wp-cumulus:1.20:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03818

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-f865-32w6-7639

github

около 3 лет назад