CVE-2011-0641 – StatPressCN <= 1.9.0 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2011-0641

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en wp-admin/admin.php del complemento StatPressCN para WordPress permite a atacantes remotos inyectar secuencias de comando o código HTML a través de los parámetros (1) what1, (2) what2, (3) what3, (4) what4, y (5) what5. NOTA:la procedencia de esta información es desconocida, los detalles son obtenidos exclusivamente de la información de terceros. • http://osvdb.org/70595 http://secunia.com/advisories/43016 http://www.securityfocus.com/bid/45950 https://exchange.xforce.ibmcloud.com/vulnerabilities/64882 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •