CVE-2012-4273: XSS
First published: Mon Aug 13 2012(Updated: )
Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ppfeufer 2-click-social-media-buttons | <=0.33 | |
| Ppfeufer 2-click-social-media-buttons | =0.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.2 | |
| Ppfeufer 2-click-social-media-buttons | =0.3 | |
| Ppfeufer 2-click-social-media-buttons | =0.10 | |
| Ppfeufer 2-click-social-media-buttons | =0.11 | |
| Ppfeufer 2-click-social-media-buttons | =0.11-r1 | |
| Ppfeufer 2-click-social-media-buttons | =0.11-r2 | |
| Ppfeufer 2-click-social-media-buttons | =0.12 | |
| Ppfeufer 2-click-social-media-buttons | =0.13 | |
| Ppfeufer 2-click-social-media-buttons | =0.14 | |
| Ppfeufer 2-click-social-media-buttons | =0.15 | |
| Ppfeufer 2-click-social-media-buttons | =0.16 | |
| Ppfeufer 2-click-social-media-buttons | =0.17 | |
| Ppfeufer 2-click-social-media-buttons | =0.18 | |
| Ppfeufer 2-click-social-media-buttons | =0.18.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.19 | |
| Ppfeufer 2-click-social-media-buttons | =0.19.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.20 | |
| Ppfeufer 2-click-social-media-buttons | =0.21 | |
| Ppfeufer 2-click-social-media-buttons | =0.21.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.22 | |
| Ppfeufer 2-click-social-media-buttons | =0.23 | |
| Ppfeufer 2-click-social-media-buttons | =0.23.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.24 | |
| Ppfeufer 2-click-social-media-buttons | =0.24.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.25 | |
| Ppfeufer 2-click-social-media-buttons | =0.26 | |
| Ppfeufer 2-click-social-media-buttons | =0.27 | |
| Ppfeufer 2-click-social-media-buttons | =0.27.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.28 | |
| Ppfeufer 2-click-social-media-buttons | =0.29 | |
| Ppfeufer 2-click-social-media-buttons | =0.30 | |
| Ppfeufer 2-click-social-media-buttons | =0.31.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.31.2 | |
| Ppfeufer 2-click-social-media-buttons | =0.31.3 | |
| Ppfeufer 2-click-social-media-buttons | =0.32.1 | |
| Ppfeufer 2-click-social-media-buttons | =0.32.2 | |
| WordPress |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html
- http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798
- http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75518
- agent/references
- agent/type
- agent/softwarecombine
- agent/author
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ppfeufer
- canonical/ppfeufer 2-click-social-media-buttons
- version/ppfeufer 2-click-social-media-buttons/0.33
- version/ppfeufer 2-click-social-media-buttons/0.1
- version/ppfeufer 2-click-social-media-buttons/0.2
- version/ppfeufer 2-click-social-media-buttons/0.3
- version/ppfeufer 2-click-social-media-buttons/0.10
- version/ppfeufer 2-click-social-media-buttons/0.11
- version/ppfeufer 2-click-social-media-buttons/0.11-r1
- version/ppfeufer 2-click-social-media-buttons/0.11-r2
- version/ppfeufer 2-click-social-media-buttons/0.12
- version/ppfeufer 2-click-social-media-buttons/0.13
- version/ppfeufer 2-click-social-media-buttons/0.14
- version/ppfeufer 2-click-social-media-buttons/0.15
- version/ppfeufer 2-click-social-media-buttons/0.16
- version/ppfeufer 2-click-social-media-buttons/0.17
- version/ppfeufer 2-click-social-media-buttons/0.18
- version/ppfeufer 2-click-social-media-buttons/0.18.1
- version/ppfeufer 2-click-social-media-buttons/0.19
- version/ppfeufer 2-click-social-media-buttons/0.19.1
- version/ppfeufer 2-click-social-media-buttons/0.20
- version/ppfeufer 2-click-social-media-buttons/0.21
- version/ppfeufer 2-click-social-media-buttons/0.21.1
- version/ppfeufer 2-click-social-media-buttons/0.22
- version/ppfeufer 2-click-social-media-buttons/0.23
- version/ppfeufer 2-click-social-media-buttons/0.23.1
- version/ppfeufer 2-click-social-media-buttons/0.24
- version/ppfeufer 2-click-social-media-buttons/0.24.1
- version/ppfeufer 2-click-social-media-buttons/0.25
- version/ppfeufer 2-click-social-media-buttons/0.26
- version/ppfeufer 2-click-social-media-buttons/0.27
- version/ppfeufer 2-click-social-media-buttons/0.27.1
- version/ppfeufer 2-click-social-media-buttons/0.28
- version/ppfeufer 2-click-social-media-buttons/0.29
- version/ppfeufer 2-click-social-media-buttons/0.30
- version/ppfeufer 2-click-social-media-buttons/0.31.1
- version/ppfeufer 2-click-social-media-buttons/0.31.2
- version/ppfeufer 2-click-social-media-buttons/0.31.3
- version/ppfeufer 2-click-social-media-buttons/0.32.1
- version/ppfeufer 2-click-social-media-buttons/0.32.2
- vendor/wordpress
- canonical/wordpress