CVE-2011-3864

The Erudite <2.7.9 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.

References (1)

[Exploit, URL Repurposed] https://sitewat.ch/en/Advisories/23

Scores

EPSS 0.0022

EPSS Percentile 44.0%

Classification

CWE

CWE-79

Status published

Affected Products (19)

somadesign/the_erudite < 2.7.8

somadesign/the_erudite

... and 4 more

Timeline

Published Sep 28, 2011

Tracked Since Feb 18, 2026