CVE-2012-5349 Pay With Tweet <= 1.1 - Cross-Site Scripting
LowCVSS 2.6
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress pay-with-tweet | <= 1.1 | No fix listed |
| wordpress pay-with-tweet(WordPress) | < 1.2 | 1.2 |
References
- 47475 third-party-advisory vendor-advisory
- wordpress.org
- 18330 exploit
- 78205 vdb-entry
- 51308 exploit vdb-entry
- paywithtweet-pay-xss(72166) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org