CVE-2012-1215
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before...
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
- Record
CVE-2012-1215- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
- Record
CVE-2012-1215- Updated
- 2026-11-02
EUVDEUVD-2012-1241 No score
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
- Record
EUVD-2012-1241- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fh7p-4pc7-4w39 No score
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before...
Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.
- Record
GHSA-fh7p-4pc7-4w39- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-1215 is a medium vulnerability (CVSS 4.3) in Yoono For Firefox, published February 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 66th percentile. No source names a fixed version.
References
packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html
support.yoono.com/yoono/topics/xss-w35in
securityfocus.com/bid/51970
exchange.xforce.ibmcloud.com/vulnerabilities/73150
nvd.nist.gov/vuln/detail/CVE-2012-1215
github.com/advisories/GHSA-fh7p-4pc7-4w39