VDB
CVE-2012-0287
CVE-2012-0287
PUBLISHED
CVSS 2.5999999046325684 LOW
Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.
EPSS 2.48% · 84.4th percentile
Risk Scores
CVSS 2.0
2.5999999046325684
EPSS Score
2.48%
84.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| wordpress | wordpress | 3.3 |
Timeline
- Jan 6, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
References
- 51237 vdb
- https://wordpress.org/news/2012/01/wordpress-3-3-1/ url
- https://nvd.nist.gov/vuln/detail/CVE-2012-0287 advisory
- https://wordpress.org/news/2012/01/wordpress-3-3-1 url
- http://www.securitytracker.com/id?1026542 technical
- http://oldmanlab.blogspot.com/2012/01/wordpress-33-xss-vulnerability.html exploit