CVE-2012-4273

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-13 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Affected products

ppfeufer 2-Click-Social-Media-Buttons: through 0.33; 0.1, 0.2, 0.3, 0.10, 0.11, 0.11-r1 (+31)

References

http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html
http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798
http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
https://exchange.xforce.ibmcloud.com/vulnerabilities/75518
http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html
http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798
http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
https://exchange.xforce.ibmcloud.com/vulnerabilities/75518

Get alerted when CVE-2012-4273 or the next vulnerability affects your stack