CVE-2012-2916 Sabre < 1.2.2 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in sabre_class_admin.php in the SABRE plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the active_option parameter to wp-admin/tools.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlo simple anti bot registration engine plugin | <= 1.2.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.1.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.2.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.2.2 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.4.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.4.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.4.2 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.6.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.6.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.6.2 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.6.3 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.7.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.7.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.7.2 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.7.3 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.7.4 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.8.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 0.9.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 1.0.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 1.1.0 | No fix listed |
| dlo simple anti bot registration engine plugin | = 1.1.1 | No fix listed |
| dlo simple anti bot registration engine plugin | = 1.1.2 | No fix listed |
| wordpress sabre(WordPress) | < 1.2.2 | 1.2.2 |
References
- packetstormsecurity.org exploit
- plugins.trac.wordpress.org exploit patch
- wordpress.org
- 53528 vdb-entry
- sabre-tools-xss(75615) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org