Unscored severity · published Aug 13, 2012
CVE-2012-4283
Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Login With Ajax · Netweblogic
through 3.0.4; 2.1; 2.1.1; 2.1.2; 2.1.3; 2.1.4; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4283
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4283
Exploit
http://plugins.trac.wordpress.org/changeset/541069
Vendor Advisory
http://secunia.com/advisories/49013
wordpress.org
http://wordpress.org/extend/plugins/login-with-ajax/changelog/
More from Login With Ajax
–
CVE-2013-2707
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for…
–
CVE-2012-2759
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject…