CVE-2011-3851

devpress/news < 0.1 - Cross-Site Scripting via cpage Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.

References (1)

Core 1
Core References
Exploit, URL Repurposed x_refsource_misc
https://sitewat.ch/en/Advisories/9

Scores

EPSS 0.0152
EPSS Percentile 71.6%

Details

CWE
CWE-79
Status published
Products (1)
devpress/news < 0.1
Published Sep 28, 2011
Tracked Since Feb 18, 2026