Unrated severityNVD Advisory· Published Aug 13, 2012· Updated Jun 16, 2026
CVE-2012-2371
CVE-2012-2371
Description
Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:mnt-tech:wp-facethumb:0.1:*:*:*:*:*:*:*
- Range: =0.1
Patches
Vulnerability mechanics
References
6- packetstormsecurity.org/files/112658/WordPress-WP-FaceThumb-Gallery-0.1-Cross-Site-Scripting.htmlnvdExploit
- www.securityfocus.com/bid/53497nvdExploit
- secunia.com/advisories/49143nvdVendor Advisory
- wordpress.org/support/topic/plugin-wp-facethumb-reflected-xss-vulnerability-cwe-79nvd
- www.openwall.com/lists/oss-security/2012/05/15/12nvd
- www.openwall.com/lists/oss-security/2012/05/16/1nvd
News mentions
0No linked articles in our index yet.