CVE-2012-5349

EUVD-2012-5271
Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
wordpresspay-with-tweet
𝑥
≤ 1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/47475
http://wordpress.org/extend/plugins/pay-with-tweet/changelog/
http://www.exploit-db.com/exploits/18330
http://www.osvdb.org/78205
http://www.securityfocus.com/bid/51308
https://exchange.xforce.ibmcloud.com/vulnerabilities/72166
http://secunia.com/advisories/47475
http://wordpress.org/extend/plugins/pay-with-tweet/changelog/
http://www.exploit-db.com/exploits/18330
http://www.osvdb.org/78205
http://www.securityfocus.com/bid/51308
https://exchange.xforce.ibmcloud.com/vulnerabilities/72166