CVE-2012-1932

A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2020-02-19

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Wolf Cms (Wolfcms)

References

• https://packetstormsecurity.com/files/111185/Wolf-CMS-0.75-Persistent-Cross-Site-Scripting.html