VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Jun 16, 2026

CVE-2012-5325

CVE-2012-5325

Description

Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag.

Affected products

3
  • Cartpauj/Shortcode Redirect2 versions
    cpe:2.3:a:cartpauj:shortcode-redirect:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cartpauj:shortcode-redirect:*:*:*:*:*:*:*:*range: <=1.0.01
    • cpe:2.3:a:cartpauj:shortcode-redirect:1.0.00:*:*:*:*:*:*:*
  • WordPress/Shortcode Redirectllm-create
    Range: <=1.0.01

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.