2 matches found
CVE-2012-1834
Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...
6.3CVSS0.02405EPSS
SaveExploits1References7
CVE-2012-1834: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...
4.3CVSS6AI score0.02405EPSS
SaveExploits1References2
20