CVE-2012-1982: Socialcms

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in my_admin/admin1_list_pages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TR_title parameter in an edit action.

Affected products

• Socialcms Socialcms: up to and including 1.0.2

Published 2012-04-05. Last modified 2026-06-16.