CVE-2012-4242

Nuclei

WordPress Plugin MF Gig Calendar - Cross-Site Scripting

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2012-4242 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin MF Gig Calendar - Cross-Site ScriptingExploitDB exploitby Chris CooperNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site ScriptingCVSS 4.3

A cross-site scripting vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the query string to the calendar page.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the website, potentially leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Update to the latest version of the WordPress Plugin MF Gig Calendar to mitigate this vulnerability.

WeaknessesCWE-79
Authorsdaffainfo
Template tagscvecve2012wordpressxsswp-pluginmf_gig_calendar_projectvuln
CVSS vector: CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE: cpe:2.3:a:mf_gig_calendar_project:mf_gig_calendar:0.9.2:*:*:*:*:*:*:*
https://nvd.nist.gov/vuln/detail/CVE-2012-4242 http://www.reactionpenetrationtesting.co.uk/mf-gig-calendar-xss.html https://github.com/ARPSyndicate/kenzer-templates https://github.com/d4n-sec/d4n-sec.github.io

Source: ProjectDiscovery

References

3