CVEvulnerability
CVE-2012-2579
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email.
Affected configurations
• wp simplemail project wp simplemail 1.0.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/84534 osvdb.org
- http://secunia.com/advisories/50208 secunia.com
- http://www.exploit-db.com/exploits/20361 Exploit
- http://www.securityfocus.com/bid/54905 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77538 exchange.xforce.ibmcloud.com
- http://osvdb.org/84534 osvdb.org
- http://secunia.com/advisories/50208 secunia.com
- http://www.exploit-db.com/exploits/20361 Exploit
- http://www.securityfocus.com/bid/54905 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77538 exchange.xforce.ibmcloud.com