CVE-2012-0895
Count Per Day < 3.1.1 - Cross-Site Scripting via Map Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-0895. PoCs published by 6Scan.
AI-analyzed exploit summary This exploit demonstrates arbitrary file download and reflected XSS vulnerabilities in the Count-per-day WordPress plugin. The file download PoC leverages a direct path traversal to retrieve sensitive files, while the XSS PoC injects malicious script tags via user-controlled input.
Description
Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.
Exploits (1)
This exploit demonstrates arbitrary file download and reflected XSS vulnerabilities in the Count-per-day WordPress plugin. The file download PoC leverages a direct path traversal to retrieve sensitive files, while the XSS PoC injects malicious script tags via user-controlled input.