CVE-2012-6511

Опубликовано: 24 янв. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in organizer/page/users.php in the Organizer plugin 1.2.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) delete_id parameter or (2) extension parameter in an "Update Setting" action to wp-admin/admin.php.

Ссылки

http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://websecurity.com.ua/5782
Exploit
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75105
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75106
Third Party Advisory
VDB Entry
http://packetstormsecurity.org/files/112086/WordPress-Organizer-1.2.1-Cross-Site-Scripting-Path-Disclosure.html
Exploit
Third Party Advisory
VDB Entry
http://websecurity.com.ua/5782
Exploit
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75105
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/75106
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:organizer_project:organizer:*:*:*:*:*:wordpress:*:*

Версия до 1.2.1 (включая)

EPSS

Процентиль: 54%

0.00318

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-j8xf-q4px-4cgp

github

больше 3 лет назад