Lucene search
K

16 matches found

Nuclei
Nuclei
added yesterday45 views

WP-FaceThumb 0.1 - Cross-Site Scripting

A cross-site scripting vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter. id: CVE-2012-2371 info: name: WP-FaceThumb 0.1 - Cross-Site Scripting author: daffainfo severity:...

4.3CVSS5.4AI score0.03711EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2012-2362

Malware in sbrugna...

4.3CVSS6.3AI score0.03711EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/22 12:10 p.m.6 views

CVE-2012-2371

Cross-site scripting XSS vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter...

4.3CVSS6AI score0.03711EPSS
Exploits1References1
NVD
NVD
added 2014/07/01 2:55 p.m.8 views

CVE-2014-4585

Cross-site scripting XSS vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajaxurl parameter to index.php...

4.3CVSS5.9AI score0.00174EPSS
Exploits1References1
Prion
Prion
added 2014/07/01 2:55 p.m.11 views

Cross site scripting

Cross-site scripting XSS vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajaxurl parameter to index.php...

4.3CVSS6.4AI score0.00174EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2014/07/01 2:0 p.m.42 views

CVE-2014-4585

The CVE-2014-4585 entry concerns the WP-FaceThumb WordPress plugin (likely 1.0 and earlier) suffering a Cross‑site Scripting (XSS) vulnerability. According to the records, an attacker could inject arbitrary script or HTML via the ajax_url parameter to index.php, enabling remote code/input manipul...

4.3CVSS6.1AI score0.00174EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2014/07/01 2:0 p.m.14 views

CVE-2014-4585

Cross-site scripting XSS vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajaxurl parameter to index.php...

5.9AI score0.00174EPSS
Exploits1References1
Patchstack
Patchstack
added 2014/06/23 12:0 a.m.18 views

WordPress WP FaceThumb Plugin <= 1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "ajaxurl" parameter to index.php. Solution Update the plugin...

4.3CVSS3AI score0.00174EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2012/08/13 8:55 p.m.12 views

CVE-2012-2371

Cross-site scripting XSS vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter...

4.3CVSS5.8AI score0.03711EPSS
Exploits1References6
Prion
Prion
added 2012/08/13 8:55 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter...

4.3CVSS6.2AI score0.03711EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2012/08/13 8:0 p.m.97 views

CVE-2012-2371

WP-FaceThumb plugin for WordPress (version 0.1) has a reflected XSS in index.php, exploitable via the pagination_wp_facethumb parameter. The NVD description confirms the vulnerability enables remote injection of arbitrary scripts/HTML. The connected Nuclei template reiterates the XSS in WP-FaceTh...

4.3CVSS6AI score0.03711EPSS
Exploits1References6Affected Software1
exploitpack
exploitpack
added 2012/05/13 12:0 a.m.10 views

WordPress Plugin WP-FaceThumb 0.1 - pagination_wp_facethum Cross-Site Scripting

WordPress Plugin WP-FaceThumb 0.1 - paginationwpfacethum Cross-Site Scripting source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

6.7AI score
Exploits0
Packet Storm
Packet Storm
added 2012/05/13 12:0 a.m.30 views

WordPress WP-FaceThumb Gallery 0.1 Cross Site Scripting

Wordpress WP-FaceThumb Gallery Plugin Description: This plugin allows your visitor to take a snapshot whith a webcam and the thumb is display on your sidebar. The visitor indicate his pseudo and can let an URL which will be link to the thumb...

7.4AI score
Exploits0
Patchstack
Patchstack
added 2012/05/13 12:0 a.m.14 views

WordPress WP FaceThumb Plugin 0.1 - Cross Site Scripting

WordPress WP-FaceThumb plugin's "paginationwpfacethum" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attack...

4.3CVSS3.1AI score0.03711EPSS
Exploits1References1Affected Software1
Exploit DB
Exploit DB
added 2012/05/13 12:0 a.m.26 views

WordPress Plugin WP-FaceThumb 0.1 - &#039;pagination_wp_facethum&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

7.4AI score
Exploits0
WPVulnDB
WPVulnDB
added 2012/05/13 12:0 a.m.16 views

WP-Facethumb Gallery <= 0.1 - Reflected Cross Site Scripting

The vendor has discontinued this product as of 2012-05-03...

4.3CVSS1.5AI score0.03711EPSS
Exploits2References2Affected Software1
Rows per page
Query Builder