Lucene search
HistoryDec 27, 2011 - 11:55 a.m.
CVE-2011-3841
cve-2011-3841
cross-site scripting
xss
wp symposium plugin
uploadify
get_profile_avatar.php
remote code injection
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.7%
Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.
Affected configurations
Node
wpsymposiumprowp_symposiumRange<11.12.08wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpsymposiumpro:wp_symposium | wpsymposiumpro wp symposium | lt | 11.12.08 |
Related
openvas
openvas
wpvulndb
wpvulndb
WP Symposium <= 11.11.26 - Cross-Site Scripting (XSS)
2014-08-01 10:58:47
prion
prion
Cross site scripting
2011-12-27 11:55:00
cvelist
cvelist
CVE-2011-3841
2011-12-27 11:00:00
nvd
nvd
CVE-2011-3841
2011-12-27 11:55:07
patchstack
patchstack
WordPress Symposium Plugin <= 11.12.07 - XSS
2011-09-26 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.7%
Related for CVE-2011-3841