FKIE_CVE-2009-4168

Vulnerability from fkie_nvd - Published: 2009-12-02 18:30 - Updated: 2026-06-16 23:13
Severity
Summary
Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter.
References
cve@mitre.orghttp://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt
cve@mitre.orghttp://secunia.com/advisories/37483Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/38161
cve@mitre.orghttp://websecurity.com.ua/3665/Exploit
cve@mitre.orghttp://websecurity.com.ua/3789/
cve@mitre.orghttp://websecurity.com.ua/3801/
cve@mitre.orghttp://websecurity.com.ua/3839/
cve@mitre.orghttp://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/508071/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/508606/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/508833/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/37100Exploit
cve@mitre.orghttp://www.securityfocus.com/bid/37479
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/3322Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/54397
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/55156
af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/37483Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/38161
af854a3a-2127-422b-91ae-364da2661108http://websecurity.com.ua/3665/Exploit
af854a3a-2127-422b-91ae-364da2661108http://websecurity.com.ua/3789/
af854a3a-2127-422b-91ae-364da2661108http://websecurity.com.ua/3801/
af854a3a-2127-422b-91ae-364da2661108http://websecurity.com.ua/3839/
af854a3a-2127-422b-91ae-364da2661108http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/508071/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/508606/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/508833/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/37100Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/37479
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/3322Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/54397
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/55156
Impacted products
Vendor Product Version
roytanck wp-cumulus *
roytanck wp-cumulus 1.00
roytanck wp-cumulus 1.01
roytanck wp-cumulus 1.02
roytanck wp-cumulus 1.2.1
roytanck wp-cumulus 1.03
roytanck wp-cumulus 1.04
roytanck wp-cumulus 1.05
roytanck wp-cumulus 1.10
roytanck wp-cumulus 1.11
roytanck wp-cumulus 1.12
roytanck wp-cumulus 1.13
roytanck wp-cumulus 1.14
roytanck wp-cumulus 1.15
roytanck wp-cumulus 1.16
roytanck wp-cumulus 1.17
roytanck wp-cumulus 1.18
roytanck wp-cumulus 1.19
roytanck wp-cumulus 1.20
wordpress wordpress *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0B95D15-ACD5-4F90-95E8-AB13DEA53D36",
              "versionEndIncluding": "1.22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "50856F71-3148-477F-9334-DAA4EB7BA964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.01:*:*:*:*:*:*:*",
              "matchCriteriaId": "49E2F3B3-943A-4515-9EA3-A09CF65D69E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "181EFDE7-C6EA-4792-9FF2-1F2AD1331CE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C12E7811-1D00-4D7A-AB6D-010865770B34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.03:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D07BA76-B594-4DA5-869B-6D7255DCFC95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.04:*:*:*:*:*:*:*",
              "matchCriteriaId": "20817C42-7191-442A-95C0-708E28344895",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.05:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA6B286E-1492-49EC-A494-A38CE9E054C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B39E022-7624-4681-B894-CF38400F04A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "76149C25-8E5D-40E8-A3E7-330FEA8FE7CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB62428F-23AB-4E6E-89CE-20CAA2370CE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "29ECAEF7-9265-4859-ACBE-C05BA2AF28E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BECB654-8EB1-4A4F-A4F4-87D02C3B39F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E64B000-1B3A-4D6D-90B8-6FF41C04A327",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A0292FB-7407-48D5-B5DE-55DE24BD6701",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "4EF4D157-9D04-4417-A88A-878AA3FE8639",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE9586EB-AF75-4666-B3DF-0346F6E7A9CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D53BB73-4092-4EB9-AC90-1B72D1A5B609",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:roytanck:wp-cumulus:1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "5992564E-4384-4D73-A9C5-C74ABB691AC0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "847DA578-4655-477E-8A6F-99FBE738E4F9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter in a tags action. Cross-site scripting (XSS) vulnerability in tagcloud.swf in the WP-Cumulus Plug-in before 1.23 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tagcloud parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de tipo cross-site scripting (XSS) en el archivo tagcloud.swf, tal como es usado en el plugin WP-Cumulus de Roy Tanck anterior a versi\u00f3n 1.23 para WordPress y la versi\u00f3n 2.0 y anterior del m\u00f3dulo Joomulus para Joomla!, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del par\u00e1metro tagcloud en una acci\u00f3n tags. La vulnerabilidad de tipo cross-site scripting (XSS) en tagcloud.swf en el plug-in WP-Cumulus anterior a versi\u00f3n 1.23 para WordPress, permite a los atacantes remotos inyectar script web o HTML arbitrario por medio del par\u00e1metro tagcloud."
    }
  ],
  "id": "CVE-2009-4168",
  "lastModified": "2026-06-16T23:13:10.220",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-12-02T18:30:00.313",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/37483"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/38161"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://websecurity.com.ua/3665/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://websecurity.com.ua/3789/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://websecurity.com.ua/3801/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://websecurity.com.ua/3839/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/508071/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/508606/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/508833/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/37100"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/37479"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/3322"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54397"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55156"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://packetstormsecurity.org/1001-exploits/joomlajvclouds-xss.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/37483"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/38161"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://websecurity.com.ua/3665/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://websecurity.com.ua/3789/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://websecurity.com.ua/3801/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://websecurity.com.ua/3839/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.roytanck.com/2009/11/15/wp-cumulus-updated-to-address-yet-another-security-issue/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/508071/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/508606/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/508833/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/37100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/37479"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/3322"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54397"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55156"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.