What is CVE-2012-4272?

CVE-2012-4272 is a vulnerability in Ppfeufer 2-Click-Social-Media-Buttons, classified under Cross-site Scripting. Published 2012-08-13.

Is CVE-2012-4272 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Ppfeufer 2-Click-Social-Media-Buttons

CVE-2012-4272

Multiple cross-site scripting (XSS) vulnerabilities in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "processing of the buttons of Xing and Pinterest".

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

Ppfeufer 2-click-social-media-buttons — versions 0.1, 0.2, 0.3
Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2012-4272?: CVE-2012-4272 is a vulnerability in Ppfeufer 2-Click-Social-Media-Buttons, classified under Cross-site Scripting. Published 2012-08-13.
Is CVE-2012-4272 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.