CVE-2012-5346 WP Live.php <= 1.2.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bencemeszaros wp-livephp | = 1.2.1 | No fix listed |
| wordpress wp-livephp(WordPress) | < 1.3 | 1.3 |
References
- packetstormsecurity.org exploit
- 51220 exploit vdb-entry
- wplivephp-wplive-xss(72080) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org