CVE-2012-6527 - Vulnerability Details

Vendors	Products
Joedolson	My Calendar
Wordpress	Wordpress

Link	Providers
http://plugins.trac.wordpress.org/changeset/490070/my-calendar
http://secunia.com/advisories/47579
http://wordpress.org/extend/plugins/my-calendar/changelog/
http://www.securityfocus.com/bid/51539
https://exchange.xforce.ibmcloud.com/vulnerabilities/72454

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2012-01-15T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47579"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-6527", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://wordpress.org/extend/plugins/my-calendar/changelog/", "refsource": "CONFIRM", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "refsource": "BID", "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47579"}, {"name": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar", "refsource": "CONFIRM", "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:28:39.989Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"name": "mycalendar-unspecified-xss(72454)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"name": "51539", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/51539"}, {"name": "47579", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47579"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-6527", "datePublished": "2013-01-31T02:00:00", "dateReserved": "2013-01-30T00:00:00", "dateUpdated": "2024-08-06T21:28:39.989Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2012-01-15T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-08-28T12:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

}

1 : { »

name : mycalendar-unspecified-xss(72454) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 (string)

}

2 : { »

name : 51539 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/51539 (string)

}

3 : { »

name : 47579 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/47579 (string)

}

4 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2012-6527 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

refsource : CONFIRM (string)

url : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

}

1 : { »

name : mycalendar-unspecified-xss(72454) (string)

refsource : XF (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 (string)

}

2 : { »

name : 51539 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/51539 (string)

}

3 : { »

name : 47579 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/47579 (string)

}

4 : { »

name : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

refsource : CONFIRM (string)

url : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T21:28:39.989Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

}

1 : { »

name : mycalendar-unspecified-xss(72454) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 (string)

}

2 : { »

name : 51539 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/51539 (string)

}

3 : { »

name : 47579 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/47579 (string)

}

4 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2012-6527 (string)

datePublished : 2013-01-31T02:00:00 (string)

dateReserved : 2013-01-30T00:00:00 (string)

dateUpdated : 2024-08-06T21:28:39.989Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:joedolson:my_calendar:*:*:*:*:*:*:*:*", "matchCriteriaId": "460D6FF1-C9DA-4507-B87A-2E81A529811D", "versionEndIncluding": "1.10.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "B0462914-1BDB-4302-B961-15BB6925E1C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B08E929E-D7D6-4577-A986-9A8B6C16836A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "9E6431AD-1AA2-4E85-8FAC-02261A881CAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "0A2487AC-006C-496A-A145-C0D4908F06D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "81310C86-5C66-480F-9A48-9DED54D4BC29", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "37205E5A-1161-473C-8BD5-BE75310B3CDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "31B3B5E1-F55D-4CAF-A6FC-B2BBE93CE6FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "6CEB78CD-B47F-49C4-95AE-15F80BEBBE40", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "1909B7EC-A787-40FF-B098-811DBF6CBCC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "E1C3CF7B-734E-4EE4-B4EF-943C8619901E", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "6B36F7A0-C567-4D85-846D-C073F705F473", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "4D719444-7206-4A5A-ACA6-AEEA07017B05", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "BD76385C-18AC-477A-B78D-CBC07871A78A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "1E80D4DE-FF58-4482-8D8E-200BA7C93A6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "B6CBEE17-9C4F-44A5-ABB6-57C1BE8AA578", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "0BEAE3B7-0483-4BD7-AA44-C36E817AFCDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "DD68D26D-EDB7-48B7-9610-12C2DE7526D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "B7BC0253-83DE-48CD-9722-6969AD33AB70", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "9A0E1ED0-57C4-4E55-951D-BAAC2E2EF610", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "804BB4A9-622E-431D-867F-E982DA6353BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "A9C4E23A-2E93-47DD-AC37-EDEC88375211", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "EDAC5BEF-F187-4B17-B7B8-AFA2CDCDB11C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "0A8484AE-FE88-4077-963B-3ED67BF17E9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "39F4FC4A-4672-4B02-BA8D-B559EDB01F07", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "5E9CA79E-D8D3-44B0-AD03-7C724609E55C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "4736616D-2210-4DA7-9B2A-84B1008230CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "52A49095-8DDE-4BC8-B92C-1AB411ACC2A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.4:*:*:*:*:*:*:*", "matchCriteriaId": "311C9F11-04BD-408E-84B4-99005440455A", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "9CE6F4CF-5848-47E9-AA48-9D2957D6F8F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.7:*:*:*:*:*:*:*", "matchCriteriaId": "0E618C37-C222-46D3-B6D2-62A9147A520C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.7.8:*:*:*:*:*:*:*", "matchCriteriaId": "E40689DA-9F41-44F6-8D3E-88AC141250CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "B9B27B68-2C08-49C6-80ED-D25B4CA98A36", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "2FFE1CE4-175C-41A0-9320-86EA336613E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "22241CC5-F427-46C6-864E-09A3F8496227", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "0B5177C0-5FD7-4BEB-BB0D-57EDCAC3EEA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "B8FDEC52-B888-47AA-B2A7-EEE12805ADC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "4B3667C5-36DB-41DC-BCE3-941DB392583B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "C95501CE-389D-4802-A4D4-8E443622110B", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "F1E0E4EA-DA6F-4CA0-A5DC-5AA040F95D43", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "5EAE3BC9-4D72-4295-B599-358A928DBE8F", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.8.9:*:*:*:*:*:*:*", "matchCriteriaId": "11FC9FB1-21D0-4B1A-8E98-5BE0F770D779", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "19B985E2-3C6F-40E7-A742-FA7721B5ABDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "A5ECF2EE-A2B5-47AF-9DAD-2A4DE687CAC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "A18D59ED-CFD9-459C-B1F0-37D53BD59572", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "F9EC81CB-7FB7-4B6A-96F3-E691C95EC125", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "B3C645DB-24CB-4D88-B5BC-F0D556707DBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "55B6A746-F580-4570-8409-5DB207BD4E0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "E82028B3-C2DA-4E50-82F4-0EA0A76200A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.7:*:*:*:*:*:*:*", "matchCriteriaId": "6E5A59BB-E3E7-4D83-94D2-B419624F93B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "BE426C8A-CC9C-497C-A669-0CB3B54AD18D", "vulnerable": true}, {"criteria": "cpe:2.3:a:joedolson:my_calendar:1.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "27DEA740-31B8-4B7F-8CCC-5553C4B54B0A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*", "matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO."}, {"lang": "es", "value": "Cross-site scripting (XSS) en el plug-in My Calendar antes de v1.10.2 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del PATH_INFO."}], "id": "CVE-2012-6527", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-01-31T05:44:00.697", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Patch"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47579"}, {"source": "cve@mitre.org", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/51539"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "http://plugins.trac.wordpress.org/changeset/490070/my-calendar"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47579"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://wordpress.org/extend/plugins/my-calendar/changelog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/51539"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72454"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 460D6FF1-C9DA-4507-B87A-2E81A529811D (string)

versionEndIncluding : 1.10.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B0462914-1BDB-4302-B961-15BB6925E1C8 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B08E929E-D7D6-4577-A986-9A8B6C16836A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 9E6431AD-1AA2-4E85-8FAC-02261A881CAC (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A2487AC-006C-496A-A145-C0D4908F06D8 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 81310C86-5C66-480F-9A48-9DED54D4BC29 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 37205E5A-1161-473C-8BD5-BE75310B3CDC (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 31B3B5E1-F55D-4CAF-A6FC-B2BBE93CE6FB (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 6CEB78CD-B47F-49C4-95AE-15F80BEBBE40 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 1909B7EC-A787-40FF-B098-811DBF6CBCC4 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.6:*:*:*:*:*:*:* (string)

matchCriteriaId : E1C3CF7B-734E-4EE4-B4EF-943C8619901E (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B36F7A0-C567-4D85-846D-C073F705F473 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D719444-7206-4A5A-ACA6-AEEA07017B05 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.9:*:*:*:*:*:*:* (string)

matchCriteriaId : BD76385C-18AC-477A-B78D-CBC07871A78A (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.4.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E80D4DE-FF58-4482-8D8E-200BA7C93A6A (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B6CBEE17-9C4F-44A5-ABB6-57C1BE8AA578 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 0BEAE3B7-0483-4BD7-AA44-C36E817AFCDC (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : DD68D26D-EDB7-48B7-9610-12C2DE7526D9 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.5.3:*:*:*:*:*:*:* (string)

matchCriteriaId : B7BC0253-83DE-48CD-9722-6969AD33AB70 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.5.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 9A0E1ED0-57C4-4E55-951D-BAAC2E2EF610 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 804BB4A9-622E-431D-867F-E982DA6353BF (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A9C4E23A-2E93-47DD-AC37-EDEC88375211 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : EDAC5BEF-F187-4B17-B7B8-AFA2CDCDB11C (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.6.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A8484AE-FE88-4077-963B-3ED67BF17E9C (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 39F4FC4A-4672-4B02-BA8D-B559EDB01F07 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 5E9CA79E-D8D3-44B0-AD03-7C724609E55C (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 4736616D-2210-4DA7-9B2A-84B1008230CE (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 52A49095-8DDE-4BC8-B92C-1AB411ACC2A5 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 311C9F11-04BD-408E-84B4-99005440455A (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CE6F4CF-5848-47E9-AA48-9D2957D6F8F8 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E618C37-C222-46D3-B6D2-62A9147A520C (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.7.8:*:*:*:*:*:*:* (string)

matchCriteriaId : E40689DA-9F41-44F6-8D3E-88AC141250CC (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B9B27B68-2C08-49C6-80ED-D25B4CA98A36 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FFE1CE4-175C-41A0-9320-86EA336613E5 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 22241CC5-F427-46C6-864E-09A3F8496227 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 0B5177C0-5FD7-4BEB-BB0D-57EDCAC3EEA5 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : B8FDEC52-B888-47AA-B2A7-EEE12805ADC7 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B3667C5-36DB-41DC-BCE3-941DB392583B (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : C95501CE-389D-4802-A4D4-8E443622110B (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.7:*:*:*:*:*:*:* (string)

matchCriteriaId : F1E0E4EA-DA6F-4CA0-A5DC-5AA040F95D43 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EAE3BC9-4D72-4295-B599-358A928DBE8F (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.8.9:*:*:*:*:*:*:* (string)

matchCriteriaId : 11FC9FB1-21D0-4B1A-8E98-5BE0F770D779 (string)

vulnerable : true (boolean)

}

42 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 19B985E2-3C6F-40E7-A742-FA7721B5ABDF (string)

vulnerable : true (boolean)

}

43 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A5ECF2EE-A2B5-47AF-9DAD-2A4DE687CAC3 (string)

vulnerable : true (boolean)

}

44 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.2:*:*:*:*:*:*:* (string)

matchCriteriaId : A18D59ED-CFD9-459C-B1F0-37D53BD59572 (string)

vulnerable : true (boolean)

}

45 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.3:*:*:*:*:*:*:* (string)

matchCriteriaId : F9EC81CB-7FB7-4B6A-96F3-E691C95EC125 (string)

vulnerable : true (boolean)

}

46 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.4:*:*:*:*:*:*:* (string)

matchCriteriaId : B3C645DB-24CB-4D88-B5BC-F0D556707DBD (string)

vulnerable : true (boolean)

}

47 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 55B6A746-F580-4570-8409-5DB207BD4E0C (string)

vulnerable : true (boolean)

}

48 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.6:*:*:*:*:*:*:* (string)

matchCriteriaId : E82028B3-C2DA-4E50-82F4-0EA0A76200A6 (string)

vulnerable : true (boolean)

}

49 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E5A59BB-E3E7-4D83-94D2-B419624F93B8 (string)

vulnerable : true (boolean)

}

50 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.9.8:*:*:*:*:*:*:* (string)

matchCriteriaId : BE426C8A-CC9C-497C-A669-0CB3B54AD18D (string)

vulnerable : true (boolean)

}

51 : { »

criteria : cpe:2.3:a:joedolson:my_calendar:1.10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 27DEA740-31B8-4B7F-8CCC-5553C4B54B0A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A77EB0E7-7FA7-4232-97DF-7C7587D163F1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. (string)

}

1 : { »

lang : es (string)

value : Cross-site scripting (XSS) en el plug-in My Calendar antes de v1.10.2 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del PATH_INFO. (string)

}

]

id : CVE-2012-6527 (string)

lastModified : 2025-04-11T00:51:21.963 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : LOW (string)

cvssData : { »

accessComplexity : HIGH (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 2.6 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:H/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 4.9 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

}

published : 2013-01-31T05:44:00.697 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Patch (string)

]

url : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/47579 (string)

}

2 : { »

source : cve@mitre.org (string)

url : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

}

3 : { »

source : cve@mitre.org (string)

url : http://www.securityfocus.com/bid/51539 (string)

}

4 : { »

source : cve@mitre.org (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Patch (string)

]

url : http://plugins.trac.wordpress.org/changeset/490070/my-calendar (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://secunia.com/advisories/47579 (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://wordpress.org/extend/plugins/my-calendar/changelog/ (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/51539 (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/72454 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object