CVE-2012-2452: Pragmamx

Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.

Affected products

• Pragmamx Pragmamx: from 1.0, before 1.12.2 (fixed in 1.12.2)

Published 2020-02-11. Last modified 2026-06-16.