Vulnerability Details CVE-2012-1932
A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.9%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
Products affected by CVE-2012-1932
-
cpe:2.3:a:wolfcms:wolf_cms:0.5.0
-
cpe:2.3:a:wolfcms:wolf_cms:0.5.5
-
cpe:2.3:a:wolfcms:wolf_cms:0.6.0
-
cpe:2.3:a:wolfcms:wolf_cms:0.7.0
-
cpe:2.3:a:wolfcms:wolf_cms:0.7.2
-
cpe:2.3:a:wolfcms:wolf_cms:0.7.3
-
cpe:2.3:a:wolfcms:wolf_cms:0.7.5