Description

Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.

Remediation

References

CVE-2012-0287

Related Vulnerabilities

Magento Cryptographic Issues Vulnerability (CVE-2019-7886)

MySQL CVE-2017-3457 Vulnerability (CVE-2017-3457)

Oracle Database Server CVE-2011-2230 Vulnerability (CVE-2011-2230)

WordPress Plugin Woocommerce User Email Verification Security Bypass (3.3.0)

Apache Tomcat version older than 6.0.9

Severity

Low

Classification

CVE-2012-0287 CWE-707

Tags

Missing Update Known Vulnerabilities