NVD

Id
11388  
Name
CVE-2011-5128  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) inc-options/deinstall_options.php, (2) inc-options/theme_options.php, or (3) inc-options/im_export_options.php, or the (4) post or (5) post_ID parameters to adminimize.php, different vectors than CVE-2011-4926.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-08-29  
Modified Date
2012-08-29  
Seq
2011-5128  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62763 11388 CVE-2011-5128 http://plugins.trac.wordpress.org/changeset?reponame=&new=467338@adminimize&old=466900@adminimize#file5  View
62764 11388 CVE-2011-5128 http://wordpress.org/extend/plugins/adminimize/changelog/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28293 JVNDB-2012-004000 WordPress 用 Adminimize プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Adminimize プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5128 53035 CVE-2011-5128 11388 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004000.html 2012-08-29 2012-08-31 View