Unrated severityNVD Advisory· Published Jan 20, 2012· Updated Apr 29, 2026
CVE-2012-0895
CVE-2012-0895
Description
Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.
Affected products
2cpe:2.3:a:tom_braider:count_per_day:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tom_braider:count_per_day:*:*:*:*:*:*:*:*range: <=3.1
- cpe:2.3:a:tom_braider:count_per_day:1.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- osvdb.org/78271nvdExploit
- packetstormsecurity.org/files/108631/countperday-downloadxss.txtnvdExploit
- www.exploit-db.com/exploits/18355nvdExploit
- www.securityfocus.com/bid/51402nvdExploit
- secunia.com/advisories/47529nvdVendor Advisory
- plugins.trac.wordpress.org/changeset/488883/count-per-daynvd
- wordpress.org/extend/plugins/count-per-day/changelog/nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/72384nvd
News mentions
0No linked articles in our index yet.