CVE:CVE-2012-4273
CNNVD:CNNVD-201208-178
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress中的2 Click Social Media Buttons插件0.34之前版本中的libs/xing.php中存在跨站脚本(XSS)漏洞。远程攻击者可利用该漏洞通过xing-url参数注入任意web脚本或HTML。
solution:Upgrade ppfeufer 2-click-social-media-buttons to a higher version than 0.33,0.1,0.2,0.3,0.10,0.11,0.11:r1,0.11:r2,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.18.1,0.19,0.19.1,0.20,0.21,0.21.1,0.22,0.23,0.23.1,0.24,0.24.1,0.25,0.26,0.27,0.27.1,0.28,0.29,0.30,0.31.1,0.31.2,0.31.3,0.32.1,0.32.2,and avoid the version (,0.33],0.1,0.2,0.3,0.10,0.11,0.11:r1,0.11:r2,0.12,0.13,0.14,0.15,0.16,0.17,0.18,0.18.1,0.19,0.19.1,0.20,0.21,0.21.1,0.22,0.23,0.23.1,0.24,0.24.1,0.25,0.26,0.27,0.27.1,0.28,0.29,0.30,0.31.1,0.31.2,0.31.3,0.32.1,0.32.2