CVE-2012-0895

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-01-20 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.

Affected products

Tom Braider Count Per Day: through 3.1; 1.0

References

http://osvdb.org/78271
http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt
http://plugins.trac.wordpress.org/changeset/488883/count-per-day
http://secunia.com/advisories/47529
http://wordpress.org/extend/plugins/count-per-day/changelog/
http://www.exploit-db.com/exploits/18355
http://www.securityfocus.com/bid/51402
https://exchange.xforce.ibmcloud.com/vulnerabilities/72384
http://osvdb.org/78271
http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt
http://plugins.trac.wordpress.org/changeset/488883/count-per-day
http://secunia.com/advisories/47529

Get alerted when CVE-2012-0895 or the next vulnerability affects your stack