CVE-2011-5107

Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress al… (CVE-2011-5107)

Description

Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Source: CVELISTV5 NVD

Metrics

Severity

none

56.91

—

no public PoC known

—

—

—

94.8 %

Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).

EPSS score

8.8 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2012-08-23 20:00 UTC

CWE

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

wordpress
alert_before_you_post0.1.1

References & sources

IDCVE-2011-5107