CVE-2012-6555

Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.07% chance of exploitation in the next 30 days, 81st percentile

Published

2013-05-23

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18908

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18908

Security advisories

• http://secunia.com/advisories/49249
• http://www.securityfocus.com/bid/53633

References

• CVE Record
• NVD entry