Lucene search

[email protected]CVE-2012-5325

HistoryOct 08, 2012 - 8:55 p.m.

CVE-2012-5325

2012-10-0820:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-5325

cross-site scripting

xss

shortcode redirect

wordpress

security

vulnerabilities

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag.

Affected configurations

NVD

Node

cartpaujshortcode-redirectRange≤1.0.01

cartpaujshortcode-redirectMatch1.0.00

AND

wordpresswordpressMatch-

CPENameOperatorVersion
cartpauj:shortcode-redirectcartpauj shortcode-redirectle1.0.01
cartpauj:shortcode-redirectcartpauj shortcode-redirecteq1.0.00

CPE	Name	Operator	Version
cartpauj:shortcode-redirect	cartpauj shortcode-redirect	le	1.0.01
cartpauj:shortcode-redirect	cartpauj shortcode-redirect	eq	1.0.00

References

packetstormsecurity.org/files/view/108914/wpshortcoderedirect-xss.txt

www.securityfocus.com/bid/51626

exchange.xforce.ibmcloud.com/vulnerabilities/72620

2.1 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

Related for CVE-2012-5325

wpvulndb1 nvd1 patchstack1 prion1 cvelist1