Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-0287
HistoryJan 06, 2012 - 4:01 a.m.

Cross site scripting

2012-01-0604:01:00
PRIOn knowledge base
www.prio-n.com
3

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the “Duplicate comment detected” feature.

CPENameOperatorVersion
wordpresseq3.3

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%