CVE-2012-6506

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

5.31% chance of exploitation in the next 30 days, 92th percentile

Published

2013-01-24

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18787

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18787

References

• CVE Record
• NVD entry

Related

• CVE-2012-6505
• CVE-2012-6508
• CVE-2012-6504
• CVE-2012-6509
• CVE-2012-6500
• CVE-2012-6510