CVE-2012-4273 2 Click Social Media Buttons < 0.34 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ppfeufer 2-click-social-media-buttons | <= 0.33 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.2 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.3 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.10 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.11 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.11-r1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.11-r2 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.12 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.13 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.14 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.15 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.16 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.17 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.18 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.18.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.19 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.19.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.20 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.21 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.21.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.22 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.23 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.23.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.24 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ppfeufer 2-click-social-media-buttons | = 0.24.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.25 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.26 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.27 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.27.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.28 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.29 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.30 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.31.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.31.2 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.31.3 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.32.1 | No fix listed |
| ppfeufer 2-click-social-media-buttons | = 0.32.2 | No fix listed |
| wordpress 2-click-socialmedia-buttons(WordPress) | < 0.34 | 0.34 |
References
- packetstormsecurity.org exploit
- plugins.trac.wordpress.org exploit patch
- wordpress.org
- wp2clicksocialmedia-xing-xss(75518) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org