CVE-2012-4273

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

5.78% chance of exploitation in the next 30 days, 93th percentile

Nuclei

medium · CWE-79

Published

2012-08-13

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4273.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2012-4267
• CVE-2012-4278
• CVE-2012-4266
• CVE-2012-4279
• CVE-2012-4265
• CVE-2012-4280