CVE-2012-5387

2012-10-2417:55:02

CWE-352

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0.006

Percentile

77.9%

JSON

Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, as demonstrated by a developer name containing XSS sequences.

Affected configurations

Nvd

Node

videousermanualswhite-label-cmsRange≤1.5

videousermanualswhite-label-cmsMatch1.0.2

videousermanualswhite-label-cmsMatch1.0.3

videousermanualswhite-label-cmsMatch1.0.4

videousermanualswhite-label-cmsMatch1.0.5

videousermanualswhite-label-cmsMatch1.1

videousermanualswhite-label-cmsMatch1.2

videousermanualswhite-label-cmsMatch1.3

videousermanualswhite-label-cmsMatch1.4

videousermanualswhite-label-cmsMatch1.4.1

videousermanualswhite-label-cmsMatch1.4.2

videousermanualswhite-label-cmsMatch1.4.3

videousermanualswhite-label-cmsMatch1.4.4

videousermanualswhite-label-cmsMatch1.4.5

videousermanualswhite-label-cmsMatch1.4.6

videousermanualswhite-label-cmsMatch1.4.7

AND

wordpresswordpressMatch-

VendorProductVersionCPE
videousermanualswhite-label-cms*cpe:2.3:a:videousermanuals:white-label-cms:*:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.0.2cpe:2.3:a:videousermanuals:white-label-cms:1.0.2:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.0.3cpe:2.3:a:videousermanuals:white-label-cms:1.0.3:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.0.4cpe:2.3:a:videousermanuals:white-label-cms:1.0.4:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.0.5cpe:2.3:a:videousermanuals:white-label-cms:1.0.5:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.1cpe:2.3:a:videousermanuals:white-label-cms:1.1:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.2cpe:2.3:a:videousermanuals:white-label-cms:1.2:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.3cpe:2.3:a:videousermanuals:white-label-cms:1.3:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.4cpe:2.3:a:videousermanuals:white-label-cms:1.4:*:*:*:*:*:*:*
videousermanualswhite-label-cms1.4.1cpe:2.3:a:videousermanuals:white-label-cms:1.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
videousermanuals	white-label-cms	*	cpe:2.3:a:videousermanuals:white-label-cms::::::::
videousermanuals	white-label-cms	1.0.2	cpe:2.3:a:videousermanuals:white-label-cms:1.0.2:::::::*
videousermanuals	white-label-cms	1.0.3	cpe:2.3:a:videousermanuals:white-label-cms:1.0.3:::::::*
videousermanuals	white-label-cms	1.0.4	cpe:2.3:a:videousermanuals:white-label-cms:1.0.4:::::::*
videousermanuals	white-label-cms	1.0.5	cpe:2.3:a:videousermanuals:white-label-cms:1.0.5:::::::*
videousermanuals	white-label-cms	1.1	cpe:2.3:a:videousermanuals:white-label-cms:1.1:::::::*
videousermanuals	white-label-cms	1.2	cpe:2.3:a:videousermanuals:white-label-cms:1.2:::::::*
videousermanuals	white-label-cms	1.3	cpe:2.3:a:videousermanuals:white-label-cms:1.3:::::::*
videousermanuals	white-label-cms	1.4	cpe:2.3:a:videousermanuals:white-label-cms:1.4:::::::*
videousermanuals	white-label-cms	1.4.1	cpe:2.3:a:videousermanuals:white-label-cms:1.4.1:::::::*