CVE-2012-4283

MEDIUM 4.3 CVSS 2.0

Published: August 13, 2012
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

Affected products and versions

n/a n/a — Versions not specified

References

plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset/541069 Exploit, Patch
secunia.com http://secunia.com/advisories/49013 Vendor Advisory
wordpress.org http://wordpress.org/extend/plugins/login-with-ajax/changelog/
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References