CVE-2012-0895

🗓️ 20 Jan 2012 17:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Cross-site scripting vulnerability in Count Per Day module for WordPres

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2012-0895	12 Jan 201200:00	–	circl
Cvelist	CVE-2012-0895	20 Jan 201217:00	–	cvelist
EUVD	EUVD-2012-0918	7 Oct 202500:30	–	euvd
NVD	CVE-2012-0895	20 Jan 201217:55	–	nvd
Patchstack	WordPress Count per Day Plugin - Multiple Vulnerabilities	12 Jan 201200:00	–	patchstack
Prion	Cross site scripting	20 Jan 201217:55	–	prion
WPVulnDB	Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access	1 Aug 201400:00	–	wpvulndb

NVD

Node

tom_braider count_per_dayRange≤3.1

OR

tom_braider count_per_dayMatch1.0

AND

wordpress wordpress

Source	Link
osvdb	www.osvdb.org/78271
secunia	www.secunia.com/advisories/47529
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/72384
plugins	www.plugins.trac.wordpress.org/changeset/488883/count-per-day
exploit-db	www.exploit-db.com/exploits/18355
securityfocus	www.securityfocus.com/bid/51402
packetstormsecurity	www.packetstormsecurity.org/files/108631/countperday-downloadxss.txt
wordpress	www.wordpress.org/extend/plugins/count-per-day/changelog/

Parameter	Position	Path	Description	CWE
map	query param	map/map.php	XSS vulnerability via map parameter in map/map.php (Count Per Day module) allowing injection of arbitrary script/HTML	CWE-79

29 Apr 2026 01:13Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.02937

cve-2012-0895 xss vulnerability map.php count per day wordpress