oss-security - CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120724072652.GA21558@kludge.henri.nerv.fi>
Date: Tue, 24 Jul 2012 10:26:52 +0300
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Cc: sschurtz@...nline.de
Subject: CVE-request: WordPress plugin Count Per Day XSS (SSCHADV2012-015)

Hello,

Can we assign 2012 CVE-identifier for XSS vulnerability in WordPress plugin Count Per Day, thanks.

Original advisory: http://www.darksecurity.de/advisories/2012/SSCHADV2012-015.txt
OSVDB: http://osvdb.org/show/osvdb/83491
Secunia advisory: http://secunia.com/advisories/49692/
Vendor page: http://www.tomsdimension.de/wp-plugins/count-per-day
SCM: http://plugins.trac.wordpress.org/changeset/571926/count-per-day#file22

Fixed in version 3.2 of the plugin, which I manually verified.

- Henri Salo

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.