CVE-2012-2579

MEDIUM 4.3 CVSS 2.0

Published: June 20, 2014
Last modified: June 16, 2026
NVD status: Modified
Reported by: cret@cert.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email.

Affected products and versions

n/a n/a — Versions not specified
wp_simplemail_project wp_simplemail — Version 1.0.6

References

osvdb.org http://osvdb.org/84534
secunia.com http://secunia.com/advisories/50208
www.exploit-db.com http://www.exploit-db.com/exploits/20361 Exploit
www.securityfocus.com http://www.securityfocus.com/bid/54905 Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/77538
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References