CVE-2012-6627: XSS
Cross-site scripting (XSS) vulnerability in admin/testmail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6627?
CVE-2012-6627 has a medium severity rating due to its cross-site scripting vulnerability that allows for potential exploitation.
How do I fix CVE-2012-6627?
To fix CVE-2012-6627, update the Newsletter Manager plugin to a version later than 1.0.2.
Who is affected by CVE-2012-6627?
Users of the Newsletter Manager plugin version 1.0.2 and earlier for WordPress are affected by CVE-2012-6627.
What type of vulnerability is CVE-2012-6627?
CVE-2012-6627 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
What is the potential impact of CVE-2012-6627?
The potential impact of CVE-2012-6627 includes the ability for attackers to execute malicious scripts in the context of the user's browser.