CVE-2012-4273

Nuclei

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2012-4273 has a selected CVSS score of 4.3; EIP currently links 1 Nuclei template.

Description

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUM2 Click Socialmedia Buttons < 0.34 - Cross-Site ScriptingCVSS 4.3

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Impact

Allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Update to the latest version of the 2 Click Socialmedia Buttons plugin (0.34 or higher) to fix the XSS vulnerability.

WeaknessesCWE-79
Authorsdaffainfo
Template tagscvecve2012wordpressxsswp-pluginpacketstormppfeufervuln
CVSS vector: CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE: cpe:2.3:a:ppfeufer:2-click-social-media-buttons:*:*:*:*:*:*:*:*
Google: inurl:"/wp-content/plugins/2-click-socialmedia-buttons"
https://nvd.nist.gov/vuln/detail/CVE-2012-4273 http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798 http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/ http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html https://exchange.xforce.ibmcloud.com/vulnerabilities/75518

Source: ProjectDiscovery

References

5