Cross-Site Scripting Vulnerability in Wolf CMS by Wolf
CVE-2012-1932

4.8MEDIUM

Key Information:

Vendor

Wolfcms

Status
Wolf Cms
Vendor
CVE Published:
19 February 2020

What is CVE-2012-1932?

Wolf CMS versions 0.75 and earlier are susceptible to a cross-site scripting (XSS) vulnerability that enables remote attackers to inject arbitrary web scripts or HTML code. This exploit occurs through the 'setting[admin_email]' parameter in the admin settings area, potentially compromising user data and site integrity. It's crucial for users of affected versions to implement security measures to mitigate the risk.

References

https://packetstormsecurity.com/files/111185/Wolf-CMS-0.7...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.