Published: 20/01/2012 Updated: 13/07/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module prior to 3.1.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the map parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tom_braider count_per_day
tom_braider count_per_day 1.0

#Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS #Version: < 311 #Date: 2011-01-12 #Author 6Scan (6scancom) security team #Software Link: wordpressorg/extend/plugins/count-per-day/ #Official fix: This advisory is released after the vendor has responded and fixed the issue #Description: User could ...

CWE-79 http://osvdb.org/78271 http://secunia.com/advisories/47529 http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt http://plugins.trac.wordpress.org/changeset/488883/count-per-day http://wordpress.org/extend/plugins/count-per-day/changelog/http://www.exploit-db.com/exploits/18355 http://www.securityfocus.com/bid/51402 https://exchange.xforce.ibmcloud.com/vulnerabilities/72384 https://nvd.nist.gov https://www.exploit-db.com/exploits/18355/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-0895

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect