CVEvulnerability
CVE-2012-4768
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the default URI.
Affected configurations
• mikejolley download monitor 3.3.5.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0042.html Exploit
- http://osvdb.org/85319 osvdb.org
- http://packetstormsecurity.org/files/116408/wpdownloadmonitor3357-xss.txt Exploit
- http://secunia.com/advisories/50511 secunia.com
- http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html www.reactionpenetrationtesting.co.uk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78422 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0042.html Exploit
- http://osvdb.org/85319 osvdb.org
- http://packetstormsecurity.org/files/116408/wpdownloadmonitor3357-xss.txt Exploit
- http://secunia.com/advisories/50511 secunia.com
- http://www.reactionpenetrationtesting.co.uk/wordpress-download-monitor-xss.html www.reactionpenetrationtesting.co.uk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78422 exchange.xforce.ibmcloud.com