NVD

Id
11467  
Name
CVE-2011-5207  
Description
Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-10-04  
Modified Date
2012-10-05  
Seq
2011-5207  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62975 11467 CVE-2011-5207 http://packetstormsecurity.org/files/view/108272/wpcartpress-xss.txt  View
62976 11467 CVE-2011-5207 http://plugins.trac.wordpress.org/changeset/482746/thecartpress  View
62977 11467 CVE-2011-5207 51216  View
62978 11467 CVE-2011-5207 thecartpress-optionspostslist-xss(72070)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34941 JVNDB-2011-005183 WordPress 用 TheCartPress プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 TheCartPress プラグインの admin/OptionsPostsList.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-5207 53114 CVE-2011-5207 11467 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005183.html 2011-12-31 2012-10-09 View