CVE-2012-2580 Postie < 1.4.10 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postieplugin postie | <= 1.5.14 | No fix listed |
| postieplugin postie | = 1.4.3 | No fix listed |
| wordpress postie(WordPress) | < 1.4.10 | 1.4.10 |
References
- 84532 vdb-entry
- 50207 third-party-advisory
- 20360 exploit
- 54909 exploit vdb-entry
- postie-wordpress-xss(77537) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org