CVE-2012-10014CWE-79

Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting

Low · published April 24, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backend_localization_admin_settings/backend_localization_save_setting/backend_localization_login_form/localize_backend of the file backend_localization.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.1 is able to address this issue. The name of the patch is 36f457ee16dd114e510fd91a3ea9fbb3c1f87184. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227232.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-04-24T17:31Z
EPSS history
Timeline
  • 24 APR 17:31Z
    Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting
    cvelistv5