Lucene search

K
cveRedhatCVE-2011-4618
HistoryJan 24, 2013 - 1:55 a.m.

CVE-2011-4618

2013-01-2401:55:02
CWE-79
redhat
web.nvd.nist.gov
28
cve-2011-4618
cross-site scripting
xss
vulnerability
advanced text widget
wordpress
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.019

Percentile

88.6%

Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected configurations

Nvd
Node
simplerealtythemeadvanced_text_widget_pluginRange2.0.1
AND
wordpresswordpressMatch-
VendorProductVersionCPE
simplerealtythemeadvanced_text_widget_plugin*cpe:2.3:a:simplerealtytheme:advanced_text_widget_plugin:*:*:*:*:*:*:*:*
wordpresswordpress-cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.019

Percentile

88.6%