CVE-2012-1068: XSS
Cross-site scripting (XSS) vulnerability in the rcajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1068?
CVE-2012-1068 is considered a medium-severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2012-1068?
To fix CVE-2012-1068, update the WP-RecentComments plugin to version 2.0.7 or later.
Who is affected by CVE-2012-1068?
CVE-2012-1068 affects users of the WP-RecentComments plugin prior to version 2.0.7 in WordPress.
What type of attack can CVE-2012-1068 facilitate?
CVE-2012-1068 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Is my website vulnerable if I use WP-RecentComments version 2.0.6 or earlier?
Yes, if you are using WP-RecentComments version 2.0.6 or earlier, your website is vulnerable to CVE-2012-1068.