Podatność CVE-2012-2371

Podatność CVE-2012-2371

Publikacja: 2012-08-13 Modyfikacja: 2012-08-14

Opis:

	Tytuł	Autor	Data
Low	WordPress WP-FaceThumb Gallery 0.1 Cross Site Scripting	Avram Marius Gab...	15.05.2012

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Mnt-tech -> Wp-facethumb

http://www.securityfocus.com/bid/53497

http://www.openwall.com/lists/oss-security/2012/05/16/1

http://www.openwall.com/lists/oss-security/2012/05/15/12

http://wordpress.org/support/topic/plugin-wp-facethumb-reflected-xss-vulnerability-cwe-79

http://secunia.com/advisories/49143

http://packetstormsecurity.org/files/112658/WordPress-WP-FaceThumb-Gallery-0.1-Cross-Site-Scripting.html