CVE-2012-6506: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6506?
CVE-2012-6506 is classified as a high severity vulnerability due to its potential for remote code execution via cross-site scripting.
How do I fix CVE-2012-6506?
To fix CVE-2012-6506, update the Zingiri Web Shop plugin to a version that addresses the cross-site scripting vulnerabilities.
Which versions of Zingiri Web Shop are affected by CVE-2012-6506?
CVE-2012-6506 specifically affects version 2.4.0 of the Zingiri Web Shop plugin.
Is WordPress itself vulnerable in CVE-2012-6506?
No, CVE-2012-6506 is not a vulnerability within WordPress itself but rather in the Zingiri Web Shop plugin.
What is cross-site scripting (XSS) as it relates to CVE-2012-6506?
Cross-site scripting (XSS) in CVE-2012-6506 occurs when an attacker injects malicious scripts into web pages viewed by users, compromising the security of the application.