Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-3856. PoCs published by SiteWatch.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in the Elegant Grunge theme for WordPress by injecting arbitrary JavaScript code via the 's' parameter in the URL. The payload bypasses input sanitization and executes in the context of the affected site.
Description
Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Exploits (1)
This exploit demonstrates a reflected XSS vulnerability in the Elegant Grunge theme for WordPress by injecting arbitrary JavaScript code via the 's' parameter in the URL. The payload bypasses input sanitization and executes in the context of the affected site.