VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 13, 2012· Updated Jun 16, 2026

CVE-2012-4283

CVE-2012-4283

Description

Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

Affected products

15
  • Netweblogic/Login With Ajax14 versions
    cpe:2.3:a:netweblogic:login_with_ajax:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:netweblogic:login_with_ajax:*:*:*:*:*:*:*:*range: <=3.0.4
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:2.21:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:netweblogic:login_with_ajax:3.0b:*:*:*:*:*:*:*
  • WordPress/Login With Ajaxllm-fuzzy
    Range: <3.0.4.1
    Package: https://wordpress.org/plugins/login-with-ajax

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.