diff --git a/cves/2012/CVE-2012-0901.yaml b/cves/2012/CVE-2012-0901.yaml index 165a3c2afc..fb82bdfed6 100644 --- a/cves/2012/CVE-2012-0901.yaml +++ b/cves/2012/CVE-2012-0901.yaml @@ -4,6 +4,7 @@ info: name: YouSayToo auto-publishing 1.0 - Reflected Cross-Site Scripting (XSS) author: daffainfo severity: medium + description: Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter. reference: https://nvd.nist.gov/vuln/detail/CVE-2012-0901 tags: cve,cve2012,wordpress,xss,wp-plugin