CVE-2012-1834 CMS Tree Page View < 0.8.9 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the cms_tpv_admin_head function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cms_tpv_view parameter to wp-admin/options-general.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cms tree page view project cms tree page view | <= 0.8.8 | No fix listed |
| cms tree page view project cms tree page view | = 0.1 | No fix listed |
| cms tree page view project cms tree page view | = 0.1a | No fix listed |
| cms tree page view project cms tree page view | = 0.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.4 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.1 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.4 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.5 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.6 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.7 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.8 | No fix listed |
| cms tree page view project cms tree page view | = 0.4.9 | No fix listed |
| cms tree page view project cms tree page view | = 0.5 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.1 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.4 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.5 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.6 | No fix listed |
| cms tree page view project cms tree page view | = 0.5.7 | No fix listed |
| cms tree page view project cms tree page view | = 0.6 | No fix listed |
| cms tree page view project cms tree page view | = 0.6.1 | No fix listed |
Show 32 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cms tree page view project cms tree page view | = 0.6.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.6.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.7 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.1 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.4 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.5 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.6 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.7 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.8 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.9 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.10 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.11 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.12 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.13 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.14 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.15 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.16 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.17 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.18 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.19 | No fix listed |
| cms tree page view project cms tree page view | = 0.7.20 | No fix listed |
| cms tree page view project cms tree page view | = 0.8 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.1 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.2 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.3 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.4 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.5 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.6 | No fix listed |
| cms tree page view project cms tree page view | = 0.8.7 | No fix listed |
| wordpress cms-tree-page-view(WordPress) | < 0.8.9 | 0.8.9 |
References
- plugins.trac.wordpress.org patch
- 48510 third-party-advisory vendor-advisory
- wordpress.org patch
- 80573 vdb-entry
- 52708 vdb-entry
- wordpress-cmstree-edit-xss(74337) vdb-entry
- www.htbridge.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org