CVE-2012-6527

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-01-15T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47579"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-6527", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://wordpress.org/extend/plugins/my-calendar/changelog/", "refsource": "CONFIRM", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "refsource": "BID", "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47579"}, {"name": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar", "refsource": "CONFIRM", "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:28:39.989Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47579"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-6527", "datePublished": "2013-01-31T02:00:00.000Z", "dateReserved": "2013-01-30T00:00:00.000Z", "dateUpdated": "2024-08-06T21:28:39.989Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:joedolson:my_calendar:*:*:*:*:*:*:*:*", "matchCriteriaId": "460D6FF1-C9DA-4507-B87A-2E81A529811D", "versionEndIncluding": "1.10.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "B0462914-1BDB-4302-B961-15BB6925E1C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B08E929E-D7D6-4577-A986-9A8B6C16836A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "9E6431AD-1AA2-4E85-8FAC-02261A881CAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "0A2487AC-006C-496A-A145-C0D4908F06D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "81310C86-5C66-480F-9A48-9DED54D4BC29", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "37205E5A-1161-473C-8BD5-BE75310B3CDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "31B3B5E1-F55D-4CAF-A6FC-B2BBE93CE6FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "6CEB78CD-B47F-49C4-95AE-15F80BEBBE40", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "1909B7EC-A787-40FF-B098-811DBF6CBCC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "E1C3CF7B-734E-4EE4-B4EF-943C8619901E", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "6B36F7A0-C567-4D85-846D-C073F705F473", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "4D719444-7206-4A5A-ACA6-AEEA07017B05", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "BD76385C-18AC-477A-B78D-CBC07871A78A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "1E80D4DE-FF58-4482-8D8E-200BA7C93A6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "B6CBEE17-9C4F-44A5-ABB6-57C1BE8AA578", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "0BEAE3B7-0483-4BD7-AA44-C36E817AFCDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD68D26D-EDB7-48B7-9610-12C2DE7526D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "B7BC0253-83DE-48CD-9722-6969AD33AB70", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "9A0E1ED0-57C4-4E55-951D-BAAC2E2EF610", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "804BB4A9-622E-431D-867F-E982DA6353BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "A9C4E23A-2E93-47DD-AC37-EDEC88375211", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "EDAC5BEF-F187-4B17-B7B8-AFA2CDCDB11C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "0A8484AE-FE88-4077-963B-3ED67BF17E9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "39F4FC4A-4672-4B02-BA8D-B559EDB01F07", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "5E9CA79E-D8D3-44B0-AD03-7C724609E55C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "4736616D-2210-4DA7-9B2A-84B1008230CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "52A49095-8DDE-4BC8-B92C-1AB411ACC2A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "311C9F11-04BD-408E-84B4-99005440455A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "9CE6F4CF-5848-47E9-AA48-9D2957D6F8F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.7:*:*:*:*:*:*:*", "matchCriteriaId": "0E618C37-C222-46D3-B6D2-62A9147A520C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.8:*:*:*:*:*:*:*", "matchCriteriaId": "E40689DA-9F41-44F6-8D3E-88AC141250CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "B9B27B68-2C08-49C6-80ED-D25B4CA98A36", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "2FFE1CE4-175C-41A0-9320-86EA336613E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "22241CC5-F427-46C6-864E-09A3F8496227", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "0B5177C0-5FD7-4BEB-BB0D-57EDCAC3EEA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "B8FDEC52-B888-47AA-B2A7-EEE12805ADC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "4B3667C5-36DB-41DC-BCE3-941DB392583B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "C95501CE-389D-4802-A4D4-8E443622110B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "F1E0E4EA-DA6F-4CA0-A5DC-5AA040F95D43", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "5EAE3BC9-4D72-4295-B599-358A928DBE8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.9:*:*:*:*:*:*:*", "matchCriteriaId": "11FC9FB1-21D0-4B1A-8E98-5BE0F770D779", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "19B985E2-3C6F-40E7-A742-FA7721B5ABDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "A5ECF2EE-A2B5-47AF-9DAD-2A4DE687CAC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "A18D59ED-CFD9-459C-B1F0-37D53BD59572", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "F9EC81CB-7FB7-4B6A-96F3-E691C95EC125", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "B3C645DB-24CB-4D88-B5BC-F0D556707DBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "55B6A746-F580-4570-8409-5DB207BD4E0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "E82028B3-C2DA-4E50-82F4-0EA0A76200A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.7:*:*:*:*:*:*:*", "matchCriteriaId": "6E5A59BB-E3E7-4D83-94D2-B419624F93B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "BE426C8A-CC9C-497C-A669-0CB3B54AD18D", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "27DEA740-31B8-4B7F-8CCC-5553C4B54B0A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}, {"lang": "es", "value": "Cross-site scripting (XSS) en el plug-in My Calendar antes de v1.10.2 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del PATH_INFO."}], "id": "CVE-2012-6527", "lastModified": "2026-06-16T23:48:17.937", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-01-31T05:44:00.697", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Patch"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47579"}, {"source": "cve@mitre.org", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/51539"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47579"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/51539"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}