CVE-2012-6527

Sažetak

Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

Reference

http://plugins.trac.wordpress.org/changeset/490070/my-calendar
http://secunia.com/advisories/47579
http://wordpress.org/extend/plugins/my-calendar/changelog/
http://www.securityfocus.com/bid/51539
https://exchange.xforce.ibmcloud.com/vulnerabilities/72454

CVSS

Base:	2.6
Impact:	2.9
Exploitability:	4.9

Pristup

Vektor	Složenost	Autentikacija
NETWORK	HIGH	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:H/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

26-12-2023 - 17:03

Objavljeno

31-01-2013 - 05:44