CVE-2012-2399

Published: Apr 21, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote attackers to inject arbitrary web script or HTML via the buttonText parameter, a different vulnerability than CVE-2012-3414.

Affected (80)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

80 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 3.3.1
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.1.1
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2.3
Wordpress Wordpress	Version 1.2.4
Wordpress Wordpress	Version 1.2.5
Wordpress Wordpress	Version 1.2.5 a
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.3.2
Wordpress Wordpress	Version 1.3.3
Wordpress Wordpress	Version 1.3
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6.5
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8.3
Wordpress Wordpress	Version 2.8.4
Wordpress Wordpress	Version 2.8.4 a
Wordpress Wordpress	Version 2.8.5.1
Wordpress Wordpress	Version 2.8.5.2
Wordpress Wordpress	Version 2.8.5
Wordpress Wordpress	Version 2.8.6
Wordpress Wordpress	Version 2.8
Wordpress Wordpress	Version 2.9.1.1
Wordpress Wordpress	Version 2.9.1
Wordpress Wordpress	Version 2.9.2
Wordpress Wordpress	Version 2.9
Wordpress Wordpress	Version 3.0.1
Wordpress Wordpress	Version 3.0.2
Wordpress Wordpress	Version 3.0.3
Wordpress Wordpress	Version 3.0.4
Wordpress Wordpress	Version 3.0.5
Wordpress Wordpress	Version 3.0.6
Wordpress Wordpress	Version 3.0
Wordpress Wordpress	Version 3.1.1
Wordpress Wordpress	Version 3.1.2
Wordpress Wordpress	Version 3.1.3
Wordpress Wordpress	Version 3.1
Wordpress Wordpress	Version 3.3