Unrated severityNVD Advisory· Published Oct 24, 2012· Updated Jun 16, 2026
CVE-2012-5388
CVE-2012-5388
Description
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter in a save action to wp-admin/admin.php, a related issue to CVE-2012-5387.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:videousermanuals:white-label-cms:1.5:*:*:*:*:*:*:*
- Range: = 1.5
Patches
Vulnerability mechanics
References
5- wordpress.org/extend/plugins/white-label-cms/changelog/nvdPatch
- www.exploit-db.com/exploits/22156/nvdExploit
- packetstormsecurity.org/files/117590/White-Label-CMS-1.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.htmlnvd
- www.securityfocus.com/bid/56166nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/79522nvd
News mentions
0No linked articles in our index yet.