CVE-2011-3861
Web Minimalist 200901 <= 1.1 - Cross-Site Scripting
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el tema Web Minimalist 200901 anterior a v1.2 para WordPress, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de PATH_INFO sobre index.php.
The Web Minimalist 200901 theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the PATH_INFO to index.php in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-09-24 First Exploit
- 2011-09-27 CVE Reserved
- 2011-09-27 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/36184 | 2011-09-24 | |
https://sitewat.ch/en/Advisories/19 | 2024-09-16 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Webminimalist Search vendor "Webminimalist" | Web Minimalist 200901 Search vendor "Webminimalist" for product "Web Minimalist 200901" | <= 1.1 Search vendor "Webminimalist" for product "Web Minimalist 200901" and version " <= 1.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
Webminimalist Search vendor "Webminimalist" | Web Minimalist 200901 Search vendor "Webminimalist" for product "Web Minimalist 200901" | 1.0 Search vendor "Webminimalist" for product "Web Minimalist 200901" and version "1.0" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|