← Back

CVE-2012-4273

Published: Aug 13, 2012Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Affected (38)

1 product
2 Click Social Media Buttons
Configuration A
38 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ppfeufer
Up to 0.33
Version 0.10
Version 0.11
Version 0.11 r1
Version 0.11 r2
Version 0.12
Version 0.13
Version 0.14
Version 0.15
Version 0.16
Version 0.17
Version 0.18.1
Version 0.18
Version 0.19.1
Version 0.19
Version 0.1
Version 0.20
Version 0.21.1
Version 0.21
Version 0.22
Version 0.23.1
Version 0.23
Version 0.24.1
Version 0.24
Version 0.25
Version 0.26
Version 0.27.1
Version 0.27
Version 0.28
Version 0.29
Version 0.2
Version 0.30
Version 0.31.1
Version 0.31.2
Version 0.31.3
Version 0.32.1
Version 0.32.2
Version 0.3
Running on/withPlatform Versions
Wordpress
Wordpress
All versions

Timeline

No history available yet.