Skip to content

CVE-2012-0932

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows...

4.3 MediumPublic exploit

CVE-2012-0932 is a medium vulnerability (CVSS 4.3) in Leadcapturepagesystem Lead Capture Page System, published January 29, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 73rd percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Exploit likelihood

1.48%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: CVE-2012-0932
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: CVE-2012-0932
Updated: 2026-11-02

EUVDEUVD-2012-0955 No score

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: EUVD-2012-0955
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xcwh-7pvx-hhg4 No score

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows...

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: GHSA-xcwh-7pvx-hhg4
Weakness: CWE-79
Updated: 2026-11-02

Affected products

leadcapturepagesystem lead capture page system

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Lead Capture - 'login.php' Script Cross-Site Scripting	2012-01-21

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References