CVE-2012-2579

EUVD-2012-2565
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, or (4) Subject field of an email.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
wp_simplemail_projectwp_simplemail
1.0.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/84534
http://secunia.com/advisories/50208
http://www.exploit-db.com/exploits/20361
http://www.securityfocus.com/bid/54905
https://exchange.xforce.ibmcloud.com/vulnerabilities/77538
http://osvdb.org/84534
http://secunia.com/advisories/50208
http://www.exploit-db.com/exploits/20361
http://www.securityfocus.com/bid/54905
https://exchange.xforce.ibmcloud.com/vulnerabilities/77538