CVE-2012-5346
MEDIUM
4.3
CVSS 2.0
Description
Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information.
Affected products and versions
- n/a n/a — Versions not specified
References
- packetstormsecurity.org http://packetstormsecurity.org/files/108282/wplivephp-xss.txt Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/51220 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/72080
- nvd.nist.gov Official NVD record