CVE-2012-6527

{"id": "CVE-2012-6527", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-01-31T05:44:00.697", "references": [{"url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar", "tags": ["Exploit", "Patch"], "source": "[email protected]"}, {"url": "http://secunia.com/advisories/47579", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://wordpress.org/extend/plugins/my-calendar/changelog/", "source": "[email protected]"}, {"url": "http://www.securityfocus.com/bid/51539", "source": "[email protected]"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454", "source": "[email protected]"}, {"url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar", "tags": ["Exploit", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/47579", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://wordpress.org/extend/plugins/my-calendar/changelog/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/51539", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}, {"lang": "es", "value": "Cross-site scripting (XSS) en el plug-in My Calendar antes de v1.10.2 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del PATH_INFO."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:joedolson:my_calendar:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "460D6FF1-C9DA-4507-B87A-2E81A529811D", "versionEndIncluding": "1.10.1"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0462914-1BDB-4302-B961-15BB6925E1C8"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B08E929E-D7D6-4577-A986-9A8B6C16836A"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E6431AD-1AA2-4E85-8FAC-02261A881CAC"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A2487AC-006C-496A-A145-C0D4908F06D8"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81310C86-5C66-480F-9A48-9DED54D4BC29"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37205E5A-1161-473C-8BD5-BE75310B3CDC"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31B3B5E1-F55D-4CAF-A6FC-B2BBE93CE6FB"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CEB78CD-B47F-49C4-95AE-15F80BEBBE40"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1909B7EC-A787-40FF-B098-811DBF6CBCC4"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1C3CF7B-734E-4EE4-B4EF-943C8619901E"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B36F7A0-C567-4D85-846D-C073F705F473"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D719444-7206-4A5A-ACA6-AEEA07017B05"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD76385C-18AC-477A-B78D-CBC07871A78A"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E80D4DE-FF58-4482-8D8E-200BA7C93A6A"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6CBEE17-9C4F-44A5-ABB6-57C1BE8AA578"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BEAE3B7-0483-4BD7-AA44-C36E817AFCDC"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD68D26D-EDB7-48B7-9610-12C2DE7526D9"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7BC0253-83DE-48CD-9722-6969AD33AB70"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A0E1ED0-57C4-4E55-951D-BAAC2E2EF610"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "804BB4A9-622E-431D-867F-E982DA6353BF"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9C4E23A-2E93-47DD-AC37-EDEC88375211"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDAC5BEF-F187-4B17-B7B8-AFA2CDCDB11C"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A8484AE-FE88-4077-963B-3ED67BF17E9C"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F4FC4A-4672-4B02-BA8D-B559EDB01F07"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E9CA79E-D8D3-44B0-AD03-7C724609E55C"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4736616D-2210-4DA7-9B2A-84B1008230CE"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A49095-8DDE-4BC8-B92C-1AB411ACC2A5"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "311C9F11-04BD-408E-84B4-99005440455A"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CE6F4CF-5848-47E9-AA48-9D2957D6F8F8"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E618C37-C222-46D3-B6D2-62A9147A520C"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E40689DA-9F41-44F6-8D3E-88AC141250CC"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9B27B68-2C08-49C6-80ED-D25B4CA98A36"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FFE1CE4-175C-41A0-9320-86EA336613E5"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22241CC5-F427-46C6-864E-09A3F8496227"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B5177C0-5FD7-4BEB-BB0D-57EDCAC3EEA5"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8FDEC52-B888-47AA-B2A7-EEE12805ADC7"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B3667C5-36DB-41DC-BCE3-941DB392583B"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C95501CE-389D-4802-A4D4-8E443622110B"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1E0E4EA-DA6F-4CA0-A5DC-5AA040F95D43"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EAE3BC9-4D72-4295-B599-358A928DBE8F"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11FC9FB1-21D0-4B1A-8E98-5BE0F770D779"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19B985E2-3C6F-40E7-A742-FA7721B5ABDF"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5ECF2EE-A2B5-47AF-9DAD-2A4DE687CAC3"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A18D59ED-CFD9-459C-B1F0-37D53BD59572"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9EC81CB-7FB7-4B6A-96F3-E691C95EC125"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3C645DB-24CB-4D88-B5BC-F0D556707DBD"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55B6A746-F580-4570-8409-5DB207BD4E0C"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E82028B3-C2DA-4E50-82F4-0EA0A76200A6"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E5A59BB-E3E7-4D83-94D2-B419624F93B8"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE426C8A-CC9C-497C-A669-0CB3B54AD18D"}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27DEA740-31B8-4B7F-8CCC-5553C4B54B0A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}