CVE-2012-0287 in WordPress
Resumen (Inglés)
Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.
Reservar
2012-01-03
Divulgación
2012-01-05
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4511 | WordPress functions.php wp_guess_url secuencias de comandos en sitios cruzados | 79 | Prueba de concepto | Arreglo oficial | CVE-2012-0287 |