CVE-2012-2583 Mini Mail Dashboard Widget < 1.43 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mini mail dashboard widget project mini mail dashboard widget | = 1.42 | No fix listed |
| wordpress mini-mail-dashboard-widget(WordPress) | < 1.43 | 1.43 |
References
- 85135 vdb-entry
- 20358 exploit
- 54888 exploit vdb-entry
- minimail-unspec-xss(77536) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org