CVE

Id
55815  
CVE No.
CVE-2012-2572  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email.  
Phase
Assigned (20120509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580972 55815 CVE-2012-2572 EXPLOIT-DB:20365  View
580973 55815 CVE-2012-2572 URL:http://www.exploit-db.com/exploits/20365  View
580974 55815 CVE-2012-2572 CONFIRM:http://wordpress.org/plugins/threewp-email-reflector/changelog  View
580975 55815 CVE-2012-2572 BID:54903  View
580976 55815 CVE-2012-2572 URL:http://www.securityfocus.com/bid/54903  View
580977 55815 CVE-2012-2572 OSVDB:85134  View
580978 55815 CVE-2012-2572 URL:http://osvdb.org/show/osvdb/85134  View
580979 55815 CVE-2012-2572 XF:threewpemailreflector-sendmail-xss(77502)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27833 JVNDB-2012-003540 SolarWinds Orion Network Performance Monitor におけるクロスサイトスクリプティングの脆弱性 SolarWinds Orion Network Performance Monitor (NPM) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2577 55815 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003540.html  View