VulnerabilityModified
CVE-2012-2583
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email.
MEDIUM 4.3EPSS 3.73%
Does this matter?
Lower severity and a low EPSS score (3.73%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 3.73% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- mini mail dashboard widget project/mini mail dashboard widget
- Source
- cret@cert.org
References
- http://osvdb.org/show/osvdb/85135
- http://www.exploit-db.com/exploits/20358Exploit
- http://www.securityfocus.com/bid/54888Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77536
- http://osvdb.org/show/osvdb/85135
- http://www.exploit-db.com/exploits/20358Exploit
- http://www.securityfocus.com/bid/54888Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77536
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.