Description
Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (7)
Core 7
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/19/17
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44038
Product x_refsource_confirm
http://wordpress.org/news/2011/04/wordpress-3-1-1/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49138
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/04/19/6
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2012/dsa-2470
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/72141
Scores
EPSS
0.0079
EPSS Percentile
74.1%
Details
CWE
CWE-79
Status
published
Products (49)
wordpress/wordpress
0.71
wordpress/wordpress
1.0
wordpress/wordpress
1.0.1
wordpress/wordpress
1.0.2
wordpress/wordpress
1.1.1
wordpress/wordpress
1.2
wordpress/wordpress
1.2.1
wordpress/wordpress
1.2.2
wordpress/wordpress
1.2.3
wordpress/wordpress
1.2.4
... and 39 more
Published
Jun 27, 2012
Tracked Since
Feb 18, 2026