CVE-2011-3857

WordPress Antisnews <1.10 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Scores

EPSS 0.0022
EPSS Percentile 44.0%

Classification

CWE
CWE-79
Status published

Affected Products (11)

antisocialmediallc/antisnews < 1.9
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
antisocialmediallc/antisnews
n/a/n/a

Timeline

Published Sep 28, 2011
Tracked Since Feb 18, 2026