CVEvulnerability
CVE-2012-4226
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.
Affected configurations
• qpw.famvanakkeren quick post widget 1.9.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0067.html Exploit
- http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html Exploit
- http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt Exploit
- http://www.securityfocus.com/bid/54311 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77731 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2012-08/0067.html Exploit
- http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html Exploit
- http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt Exploit
- http://www.securityfocus.com/bid/54311 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77731 exchange.xforce.ibmcloud.com