From 0767a5b9f38a6bb8dd93f1ddb1fcbfbe92f726f4 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Wed, 14 Jul 2021 19:07:09 +0530 Subject: [PATCH] Update CVE-2012-2371.yaml --- cves/2012/CVE-2012-2371.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/cves/2012/CVE-2012-2371.yaml b/cves/2012/CVE-2012-2371.yaml index 3e63655c9b..61a2207ec3 100644 --- a/cves/2012/CVE-2012-2371.yaml +++ b/cves/2012/CVE-2012-2371.yaml @@ -4,6 +4,7 @@ info: name: WP-FaceThumb 0.1 - Reflected Cross-Site Scripting (XSS) author: daffainfo severity: medium + description: Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter. reference: https://nvd.nist.gov/vuln/detail/CVE-2012-2371 tags: cve,cve2012,wordpress,xss,wp-plugin