Unrated severityNVD Advisory· Published Apr 17, 2012· Updated Jun 16, 2026
CVE-2012-1979
CVE-2012-1979
Description
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:syndeocms:syndeocms:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:syndeocms:syndeocms:*:*:*:*:*:*:*:*range: <=3.0.01
- cpe:2.3:a:syndeocms:syndeocms:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.5.00:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.5.01:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.6.00:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.7.00:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.8.00:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.8.02:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:2.9.00:*:*:*:*:*:*:*
- cpe:2.3:a:syndeocms:syndeocms:3.0.00:*:*:*:*:*:*:*
- (no CPE)range: <=3.0.01
Patches
Vulnerability mechanics
References
6- www.exploit-db.com/exploits/18686/nvdExploit
- www.webapp-security.com/wp-content/uploads/2012/03/syndeocms_3.0.01-Persistent-XSS.txtnvdExploit
- osvdb.org/80746nvd
- packetstormsecurity.org/files/111405/SyndeoCMS-3.0.01-Cross-Site-Scripting.htmlnvd
- www.securityfocus.com/bid/52840nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/74545nvd
News mentions
0No linked articles in our index yet.