VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Apr 29, 2026

CVE-2012-5325

CVE-2012-5325

Description

Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (1) url or (2) sec attributes in a redirect tag.

Affected products

2
  • Cartpauj/Shortcode Redirect2 versions
    cpe:2.3:a:cartpauj:shortcode-redirect:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cartpauj:shortcode-redirect:*:*:*:*:*:*:*:*range: <=1.0.01
    • cpe:2.3:a:cartpauj:shortcode-redirect:1.0.00:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.