CVE-2012-6506

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/75179

https://exchange.xforce.ibmcloud.com/vulnerabilities/75178

http://www.securityfocus.com/bid/53278

http://www.osvdb.org/81493

http://www.osvdb.org/81492

http://wordpress.org/extend/plugins/zingiri-web-shop/changelog/

http://secunia.com/advisories/48991

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS