{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-08-15T21:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt"}, {"name": "49692", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/49692"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://plugins.trac.wordpress.org/changeset/571926/count-per-day"}, {"name": "83491", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/83491"}, {"name": "[oss-security] 20120727 Re: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/07/27/2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.tomsdimension.de/wp-plugins/count-per-day"}, {"name": "[oss-security] 20120724 CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2012/07/24/4"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-3434", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt", "refsource": "MISC", "url": "http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt"}, {"name": "49692", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/49692"}, {"name": "http://plugins.trac.wordpress.org/changeset/571926/count-per-day", "refsource": "CONFIRM", "url": "http://plugins.trac.wordpress.org/changeset/571926/count-per-day"}, {"name": "83491", "refsource": "OSVDB", "url": "http://www.osvdb.org/83491"}, {"name": "[oss-security] 20120727 Re: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/07/27/2"}, {"name": "http://www.tomsdimension.de/wp-plugins/count-per-day", "refsource": "CONFIRM", "url": "http://www.tomsdimension.de/wp-plugins/count-per-day"}, {"name": "[oss-security] 20120724 CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2012/07/24/4"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:12.641Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt"}, {"name": "49692", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/49692"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://plugins.trac.wordpress.org/changeset/571926/count-per-day"}, {"name": "83491", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/83491"}, {"name": "[oss-security] 20120727 Re: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/07/27/2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.tomsdimension.de/wp-plugins/count-per-day"}, {"name": "[oss-security] 20120724 CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2012/07/24/4"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-3434", "datePublished": "2012-08-15T21:00:00Z", "dateReserved": "2012-06-14T00:00:00Z", "dateUpdated": "2024-09-16T23:05:49.329Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tom_braider:count_per_day:*:*:*:*:*:*:*:*", "matchCriteriaId": "BBD13C64-FEE8-42D2-AC90-E09661736185", "versionEndIncluding": "3.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:tom_braider:count_per_day:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "8CE88945-2338-4CF0-84E1-CA70A20EBFE1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or (3) datemax parameter."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en userperspan.php en el m\u00f3dulo (Count Per Day) anterior a v3.2 para Wordpress permite a atacantes remotos inyectar c\u00f3digo web o HTML arbitrario a trav\u00e9s de (1) una p\u00e1gina, (2) el par\u00e1metro (datemin) o (3) el par\u00e1metro (datemax)."}], "id": "CVE-2012-3434", "lastModified": "2020-07-13T10:51:06.210", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-08-15T21:55:03.713", "references": [{"source": "secalert@redhat.com", "tags": ["Exploit", "Patch"], "url": "http://plugins.trac.wordpress.org/changeset/571926/count-per-day"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/49692"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/07/24/4"}, {"source": "secalert@redhat.com", "url": "http://www.openwall.com/lists/oss-security/2012/07/27/2"}, {"source": "secalert@redhat.com", "tags": ["Exploit"], "url": "http://www.osvdb.org/83491"}, {"source": "secalert@redhat.com", "url": "http://www.tomsdimension.de/wp-plugins/count-per-day"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}