CVE-2012-2129
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote...
CVE-2012-2129 is a medium vulnerability (CVSS 4.3) in Andreas Gohr Dokuwiki, published August 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. Fixed in dokuwiki 0.0.20120125a-1.
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- Updated
- 2026-11-02
EUVDEUVD-2012-2129 No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
EUVD-2012-2129- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2423-333r-g3m8 No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote...
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
GHSA-2423-333r-g3m8- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
CVE-2012-2129- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2129 No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
DEBIAN-CVE-2012-2129- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2129 No score
Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or HTML via the target parameter in an edit action.
- Record
UBUNTU-CVE-2012-2129- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
openwall.com/lists/oss-security/2012/04/23/1
securityfocus.com/bid/53041
bugs.gentoo.org/show_bug.cgi?id=412891
bugzilla.redhat.com/show_bug.cgi?id=815122
seclists.org/bugtraq/2012/Apr/121
github.com/splitbrain/dokuwiki/commit/ff71173477e54774b5571015d49d944f51cb8a26
Show 10 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/74907
ircrash.com/uploads/dokuwiki.txt
secunia.com/advisories/48848
bugs.dokuwiki.org/index.php?do=details&task_id=2487
nvd.nist.gov/vuln/detail/CVE-2012-2129
security-tracker.debian.org/tracker/CVE-2012-2129
ubuntu.com/security/CVE-2012-2129
cve.org/CVERecord?id=CVE-2012-2129