CVEvulnerability
CVE-2012-2580
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.
Affected configurations
• postieplugin postie (<= 1.5.14)
• postieplugin postie 1.4.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/84532 osvdb.org
- http://secunia.com/advisories/50207 secunia.com
- http://www.exploit-db.com/exploits/20360 Exploit
- http://www.securityfocus.com/bid/54909 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77537 exchange.xforce.ibmcloud.com
- http://osvdb.org/84532 osvdb.org
- http://secunia.com/advisories/50207 secunia.com
- http://www.exploit-db.com/exploits/20360 Exploit
- http://www.securityfocus.com/bid/54909 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77537 exchange.xforce.ibmcloud.com