CVEvulnerability
CVE-2012-5349
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-10-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.
Affected configurations
• wordpress pay-with-tweet (<= 1.1)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/47475 Vendor Advisory
- http://wordpress.org/extend/plugins/pay-with-tweet/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18330 Exploit
- http://www.osvdb.org/78205 www.osvdb.org
- http://www.securityfocus.com/bid/51308 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72166 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47475 Vendor Advisory
- http://wordpress.org/extend/plugins/pay-with-tweet/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18330 Exploit
- http://www.osvdb.org/78205 www.osvdb.org
- http://www.securityfocus.com/bid/51308 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72166 exchange.xforce.ibmcloud.com