CVE-2012-1212

Smwplus Smw+ < 1.6.0_2 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the smwfOnSfSetTargetName function in extensions/SMWHalo/includes/SMW_Initialize.php in Semantic Enterprise Wiki (SMW+) 1.5.6, 1.6.0_2 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter to index.php/Special:FormEdit. NOTE: some of these details are obtained from third party information.

References (5)

Scores

EPSS 0.0045
EPSS Percentile 63.2%

Classification

CWE
CWE-79
Status published

Affected Products (12)

smwplus/smw\+
smwplus/smw\+ < 1.6.0_2
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
smwplus/smw\+
n/a/n/a

Timeline

Published Feb 24, 2012
Tracked Since Feb 18, 2026