CVE-2011-3853

WordPress Hybrid <0.10 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.

References (1)

Scores

EPSS 0.0022
EPSS Percentile 44.0%

Classification

CWE
CWE-79
Status published

Affected Products (14)

themehybrid/hybrid < 0.9
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
themehybrid/hybrid
n/a/n/a

Timeline

Published Sep 28, 2011
Tracked Since Feb 18, 2026