exploitDog

CVE-2012-6627

Опубликовано: 16 янв. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Ссылки

http://packetstormsecurity.org/files/112694/WordPress-Newsletter-Manager-1.0-Cross-Site-Scripting.html
Exploit
http://secunia.com/advisories/49152
Vendor Advisory
http://packetstormsecurity.org/files/112694/WordPress-Newsletter-Manager-1.0-Cross-Site-Scripting.html
Exploit
http://secunia.com/advisories/49152
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xyzscripts:newsletter_manager:*:-:-:*:-:wordpress:*:*

Версия до 1.0.2 (включая)

cpe:2.3:a:xyzscripts:newsletter_manager:1.0:-:-:*:-:wordpress:*:*

cpe:2.3:a:xyzscripts:newsletter_manager:1.0.1:-:-:*:-:wordpress:*:*

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-g27w-3hm7-2hhh

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79