CVE-2012-1899

EUVD-2012-1909
Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name, (2) Last name or (3) Email (required) fields.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Affected Products (NVD)
VendorProductVersion
nikola_posawebfoliocms
1.0.2
nikola_posawebfoliocms
1.0.3
nikola_posawebfoliocms
1.0.4
nikola_posawebfoliocms
1.0.5
nikola_posawebfoliocms
1.0.6
nikola_posawebfoliocms
1.0.7
nikola_posawebfoliocms
1.0.8
nikola_posawebfoliocms
1.0.9
nikola_posawebfoliocms
1.1.0
nikola_posawebfoliocms
1.1.1
nikola_posawebfoliocms
1.1.2
nikola_posawebfoliocms
1.1.3
nikola_posawebfoliocms
1.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html
http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/52335
https://exchange.xforce.ibmcloud.com/vulnerabilities/73738
http://ivanobinetti.blogspot.com/2012/03/webfolio-114-multiple-xss.html
http://packetstormsecurity.org/files/110524/Webfolio-CMS-1.1.4-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/52335
https://exchange.xforce.ibmcloud.com/vulnerabilities/73738