CVEvulnerability

CVE-2012-2399

10.0 HIGH Published 2012-04-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-04-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different vulnerability than CVE-2012-3414.

Affected configurations

• wordpress wordpress (<= 3.3.1) • wordpress wordpress 0.71 • wordpress wordpress 1.0 • wordpress wordpress 1.0.1 • wordpress wordpress 1.0.2 • wordpress wordpress 1.1.1 • wordpress wordpress 1.2 • wordpress wordpress 1.2.1 • wordpress wordpress 1.2.2 • wordpress wordpress 1.2.3 • wordpress wordpress 1.2.4 • wordpress wordpress 1.2.5 • wordpress wordpress 1.3 • wordpress wordpress 1.3.2 • wordpress wordpress 1.3.3 • wordpress wordpress 1.5 • wordpress wordpress 1.5.1 • wordpress wordpress 1.5.1.1 • wordpress wordpress 1.5.1.2 • wordpress wordpress 1.5.1.3 • wordpress wordpress 1.5.2 • wordpress wordpress 2.0 • wordpress wordpress 2.0.1 • wordpress wordpress 2.0.2 • wordpress wordpress 2.0.4 • wordpress wordpress 2.0.5 • wordpress wordpress 2.0.6 • wordpress wordpress 2.0.7 • wordpress wordpress 2.0.8 • wordpress wordpress 2.0.9 • wordpress wordpress 2.0.10 • wordpress wordpress 2.0.11 • wordpress wordpress 2.1 • wordpress wordpress 2.1.1 • wordpress wordpress 2.1.2 • wordpress wordpress 2.1.3 • wordpress wordpress 2.2 • wordpress wordpress 2.2.1 • wordpress wordpress 2.2.2 • wordpress wordpress 2.2.3 • wordpress wordpress 2.3 • wordpress wordpress 2.3.1 • wordpress wordpress 2.3.2 • wordpress wordpress 2.3.3 • wordpress wordpress 2.5 • wordpress wordpress 2.5.1 • wordpress wordpress 2.6 • wordpress wordpress 2.6.1 • wordpress wordpress 2.6.2 • wordpress wordpress 2.6.3 • wordpress wordpress 2.6.5 • wordpress wordpress 2.7 • wordpress wordpress 2.7.1 • wordpress wordpress 2.8 • wordpress wordpress 2.8.1 • wordpress wordpress 2.8.2 • wordpress wordpress 2.8.3 • wordpress wordpress 2.8.4 • wordpress wordpress 2.8.5 • wordpress wordpress 2.8.5.1 … and 18 more

References