CVE-2012-2403

Published Apr 21, 2012 CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Description
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2670-1 wordpress security update
EUVD EUVD EUVD-2012-2390 wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.02261}

epss

{'score': 0.03128}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 7:34 PM
Reserved
Apr 21, 2012, 12:00 AM
Status
Modified
Published
Apr 21, 2012, 11:55 PM
Modified
Jun 16, 2026, 11:41 PM