Lucene search
MitreCVE-2012-5325HistoryOct 08, 2012 - 8:55 p.m.
CVE-2012-5325
2012-10-0820:55:01
CWE-79
mitre
web.nvd.nist.gov
44
cve-2012-5325
cross-site scripting
xss
shortcode redirect
wordpress
security
vulnerabilities
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
39.3%
Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag.
Affected configurations
Node
cartpaujshortcode-redirectRange≤1.0.01
ORcartpaujshortcode-redirectMatch1.0.00
wordpresswordpressMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cartpauj | shortcode-redirect | * | cpe:2.3:a:cartpauj:shortcode-redirect:*:*:*:*:*:*:*:* |
| cartpauj | shortcode-redirect | 1.0.00 | cpe:2.3:a:cartpauj:shortcode-redirect:1.0.00:*:*:*:*:*:*:* |
| wordpress | wordpress | - | cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:* |
Related
patchstack
patchstack
WordPress Shortcode Redirect Plugin <= 1.0.01 - Multiple XSS
2012-10-08 00:00:00
wpvulndb
wpvulndb
Shortcode Redirect <= 1.0.01 - Stored Cross Site Scripting
2014-08-01 10:58:45
nvd
nvd
CVE-2012-5325
2012-10-08 20:55:01
prion
prion
Cross site scripting
2012-10-08 20:55:00
cvelist
cvelist
CVE-2012-5325
2012-10-08 20:00:00
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
39.3%
Related for CVE-2012-5325