NVD

Id
47105  
Name
CVE-2012-6312  
Description
Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form action to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-12-11  
Modified Date
2012-12-28  
Seq
2012-6312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235876 47105 CVE-2012-6312 20121207 Update on CVE assigned for Video Lead Form Plugin Cross-Site  View
235877 47105 CVE-2012-6312 http://wordpress.org/extend/plugins/video-lead-form/changelog/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29978 JVNDB-2012-005685 WordPress 用 Video Lead Form プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Video Lead Form プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6312 59550 CVE-2012-6312 47105 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005685.html 2012-12-11 2012-12-13 View