4.3

CVE-2012-4273

Exploit

2 Click Social Media Buttons < 0.34 - Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.
Mögliche Gegenmaßnahme
2 Click Social Media Buttons: Update to version 0.34, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt 2 Click Social Media Buttons
Version [*, 0.34)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ppfeufer ≫ 2-click-social-media-buttons Version <= 0.33
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.1 Update-
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.2
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.3
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.10
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.11
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.11 Updater1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.11 Updater2
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.12
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.13
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.14
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.15
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.16
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.17
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.18
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.18.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.19
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.19.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.20
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.21
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.21.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.22
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.23
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.23.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.24
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.24.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.25
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.26
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.27
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.27.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.28
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.29
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.30
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.31.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.31.2
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.31.3
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.32.1
   Wordpress ≫ Wordpress Version-
Ppfeufer ≫ 2-click-social-media-buttons Version0.32.2
   Wordpress ≫ Wordpress Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.3% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.