CVE-2012-6506

Currently unrated

Key Information:

Vendor
Wordpress
Status
Zingiri Web Shop
Vendor
CVE Published:
24 January 2013

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.

References

http://www.osvdb.org/81493
vdb-entryx_refsource_OSVDB
http://plugins.trac.wordpress.org/changeset?reponame=&old...
x_refsource_CONFIRM
http://wordpress.org/extend/plugins/zingiri-web-shop/chan...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.