NVD

Id
44611  
Name
CVE-2012-2920  
Description
Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-05-21  
Modified Date
2012-08-13  
Seq
2012-2920  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
223990 44611 CVE-2012-2920 http://plugins.trac.wordpress.org/changeset?old_path=%2Fuser-photo&old=541880&new_path=%2Fuser-photo&new=541880  View
223991 44611 CVE-2012-2920 http://wordpress.org/extend/plugins/user-photo/changelog/  View
223992 44611 CVE-2012-2920 53449  View
223993 44611 CVE-2012-2920 userphoto-optionsgeneral-xss(75496)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26791 JVNDB-2012-002498 WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 User Photo プラグインの user-photo.php 内の userphoto_options_page 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2920 56158 CVE-2012-2920 44611 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002498.html 2012-05-21 2012-05-23 View