CVE-2011-4956

Wordpress < 3.1 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (7)

[Vendor Advisory] http://secunia.com/advisories/44038

[Vendor Advisory] http://secunia.com/advisories/49138

[Product] http://wordpress.org/news/2011/04/wordpress-3-1-1/

[Third Party Advisory, VDB Entry] http://www.osvdb.org/72141

[Third Party Advisory] http://www.debian.org/security/2012/dsa-2470

[Mailing List] http://www.openwall.com/lists/oss-security/2012/04/19/17

[Mailing List] http://www.openwall.com/lists/oss-security/2012/04/19/6

Scores

EPSS 0.0080

EPSS Percentile 73.8%

Classification

CWE

CWE-79

Status published

Affected Products (50)

wordpress/wordpress < 3.1

wordpress/wordpress

... and 35 more

Timeline

Published Jun 27, 2012

Tracked Since Feb 18, 2026