CVE-2012-0220
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in...
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
CVE-2012-0220- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
CVE-2012-0220- Updated
- 2026-11-02
EUVDEUVD-2012-0256 No score
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
EUVD-2012-0256- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qph5-w8v4-j893 No score
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in...
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
GHSA-qph5-w8v4-j893- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
CVE-2012-0220- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0220 No score
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
- Record
DEBIAN-CVE-2012-0220- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10860-1 No score
ikiwiki-3.20200202.3-2.7 on GA media
These are all security issues fixed in the ikiwiki-3.20200202.3-2.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10860-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ikiwikiDebian:12 |
before 3.20120516 | 3.20120516 |
ikiwikiDebian:13 |
before 3.20120516 | 3.20120516 |
ikiwikiDebian:14 |
before 3.20120516 | 3.20120516 |
ikiwikiDebian:6.0 |
before 3.20100815.9, plus listed versions 3.20100815.63.20100815.7 |
3.20100815.9 |
ikiwikiopenSUSE:Tumbleweed From an advisory covering 14 CVEs |
before 3.20200202.3-2.7 | 3.20200202.3-2.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0220 is a medium vulnerability (CVSS 4.3) in Ikiwiki, published May 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in ikiwiki 3.20120516.
References
debian.org/security/2012/dsa-2474
secunia.com/advisories/49199
osvdb.org/81995
exchange.xforce.ibmcloud.com/vulnerabilities/75702
securityfocus.com/bid/53599
ikiwiki.info/news/version_3.20120516
Show 20 moreShow less
source.ikiwiki.branchable.com?p=source.git%3Ba=commitdiff%3Bh=fbfcea89f8e06426c73ab8ea369ca4cdc566db6f
nvd.nist.gov/vuln/detail/CVE-2012-0220
github.com/advisories/GHSA-qph5-w8v4-j893
security-tracker.debian.org/tracker/CVE-2012-0220
suse.com/security/cve/CVE-2008-0169