Exploitation Summary
EIP tracks 1 public exploit for CVE-2011-3862. PoCs published by SiteWatch.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in the Morning Coffee WordPress theme by injecting malicious script tags via URL manipulation. The payload bypasses input sanitization to execute arbitrary JavaScript in the context of the affected site.
Description
Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Exploits (1)
This exploit demonstrates a reflected XSS vulnerability in the Morning Coffee WordPress theme by injecting malicious script tags via URL manipulation. The payload bypasses input sanitization to execute arbitrary JavaScript in the context of the affected site.