CVE-2012-2580

2014-06-2014:00:00

certcc

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.

References

osvdb.org/84532

secunia.com/advisories/50207

www.exploit-db.com/exploits/20360

www.securityfocus.com/bid/54909

exchange.xforce.ibmcloud.com/vulnerabilities/77537