CVE-2012-4226

MEDIUM 4.3 CVSS 2.0

Published: September 3, 2014
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.

Affected products and versions

n/a n/a — Versions not specified
qpw.famvanakkeren quick_post_widget — Version 1.9.1

References

archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2012-08/0067.html Exploit
packetstormsecurity.com http://packetstormsecurity.com/files/115463/WordPress-Quick-Post-Widget-1.9.1-Cross-Site-Scripting.html Exploit
www.darksecurity.de http://www.darksecurity.de/advisories/2012/SSCHADV2012-016.txt Exploit
www.securityfocus.com http://www.securityfocus.com/bid/54311
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/77731
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References