CVE-2011-3859

WordPress Trending <0.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by SiteWatch · textwebappsphp

https://www.exploit-db.com/exploits/36195

View Code ZIP pw:eip

References (1)

[Exploit, URL Repurposed] https://sitewat.ch/en/Advisories/17

Scores

EPSS 0.0037

EPSS Percentile 58.6%

Classification

CWE

CWE-79

Status published

Affected Products (2)

themehybrid/trending < 0.1

n/a/n/a

Timeline

Published Sep 28, 2011

Tracked Since Feb 18, 2026