CVE-2012-6506 Zingiri Web Shop Plugin <= 2.4.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 5.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zingiri web shop | = 2.4.0 | No fix listed |
| wordpress zingiri-web-shop(WordPress) | < 2.4.2 | 2.4.2 |
References
- plugins.trac.wordpress.org exploit patch
- 48991 third-party-advisory vendor-advisory
- wordpress.org
- 18787 exploit
- 81492 vdb-entry
- 81493 vdb-entry
- 53278 vdb-entry
- zingiriwebshop-zinginc-xss(75178) vdb-entry
- zingiriwebshop-onecheckout-xss(75179) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org