Vulnerabilities

TI-2012-02963 CVE-2012-3434 · GHSA-pppx-fqgq-5fxj

Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) datemin, or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02415 Published 2012-08-15 No fix listed CWE-79

TI-2012-00823 CVE-2012-0896 · GHSA-qr5q-5vgw-wghh

Absolute path traversal vulnerability in download.php in the Count Per Day module before…

MEDIUM 43

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.22664 Published 2012-01-20 No fix listed CWE-22

TI-2012-00822 CVE-2012-0895 · GHSA-8w9j-cm37-ch88

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module…

LOW 28

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05324 Published 2012-01-20 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per…

Absolute path traversal vulnerability in download.php in the Count Per Day module before…

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module…