CVE-2012-4273

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
VendorProductVersion
ppfeufer2-click-social-media-buttons
𝑥
≤ 0.33
ppfeufer2-click-social-media-buttons
0.1
ppfeufer2-click-social-media-buttons
0.2
ppfeufer2-click-social-media-buttons
0.3
ppfeufer2-click-social-media-buttons
0.10
ppfeufer2-click-social-media-buttons
0.11
ppfeufer2-click-social-media-buttons
0.11:r1
ppfeufer2-click-social-media-buttons
0.11:r2
ppfeufer2-click-social-media-buttons
0.12
ppfeufer2-click-social-media-buttons
0.13
ppfeufer2-click-social-media-buttons
0.14
ppfeufer2-click-social-media-buttons
0.15
ppfeufer2-click-social-media-buttons
0.16
ppfeufer2-click-social-media-buttons
0.17
ppfeufer2-click-social-media-buttons
0.18
ppfeufer2-click-social-media-buttons
0.18.1
ppfeufer2-click-social-media-buttons
0.19
ppfeufer2-click-social-media-buttons
0.19.1
ppfeufer2-click-social-media-buttons
0.20
ppfeufer2-click-social-media-buttons
0.21
ppfeufer2-click-social-media-buttons
0.21.1
ppfeufer2-click-social-media-buttons
0.22
ppfeufer2-click-social-media-buttons
0.23
ppfeufer2-click-social-media-buttons
0.23.1
ppfeufer2-click-social-media-buttons
0.24
ppfeufer2-click-social-media-buttons
0.24.1
ppfeufer2-click-social-media-buttons
0.25
ppfeufer2-click-social-media-buttons
0.26
ppfeufer2-click-social-media-buttons
0.27
ppfeufer2-click-social-media-buttons
0.27.1
ppfeufer2-click-social-media-buttons
0.28
ppfeufer2-click-social-media-buttons
0.29
ppfeufer2-click-social-media-buttons
0.30
ppfeufer2-click-social-media-buttons
0.31.1
ppfeufer2-click-social-media-buttons
0.31.2
ppfeufer2-click-social-media-buttons
0.31.3
ppfeufer2-click-social-media-buttons
0.32.1
ppfeufer2-click-social-media-buttons
0.32.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html
http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798
http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
https://exchange.xforce.ibmcloud.com/vulnerabilities/75518
http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html
http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798
http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
https://exchange.xforce.ibmcloud.com/vulnerabilities/75518