Lucene search

K
nvd[email protected]NVD:CVE-2011-3856
HistorySep 28, 2011 - 10:55 a.m.

CVE-2011-3856

2011-09-2810:55:04
CWE-79
web.nvd.nist.gov
1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

54.4%

Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Affected configurations

Nvd
Node
atastypixelelegant_grungeRange1.0.3
OR
atastypixelelegant_grungeMatch0.1
OR
atastypixelelegant_grungeMatch0.2
OR
atastypixelelegant_grungeMatch0.2.1
OR
atastypixelelegant_grungeMatch0.2.2
OR
atastypixelelegant_grungeMatch0.3
OR
atastypixelelegant_grungeMatch0.4.1
OR
atastypixelelegant_grungeMatch0.4.2
OR
atastypixelelegant_grungeMatch0.4.3
OR
atastypixelelegant_grungeMatch0.4.4
OR
atastypixelelegant_grungeMatch0.4.5
OR
atastypixelelegant_grungeMatch1.0
OR
atastypixelelegant_grungeMatch1.0.1
OR
atastypixelelegant_grungeMatch1.0.2
AND
wordpresswordpress
VendorProductVersionCPE
atastypixelelegant_grunge*cpe:2.3:a:atastypixel:elegant_grunge:*:*:*:*:*:*:*:*
atastypixelelegant_grunge0.1cpe:2.3:a:atastypixel:elegant_grunge:0.1:*:*:*:*:*:*:*
atastypixelelegant_grunge0.2cpe:2.3:a:atastypixel:elegant_grunge:0.2:*:*:*:*:*:*:*
atastypixelelegant_grunge0.2.1cpe:2.3:a:atastypixel:elegant_grunge:0.2.1:*:*:*:*:*:*:*
atastypixelelegant_grunge0.2.2cpe:2.3:a:atastypixel:elegant_grunge:0.2.2:*:*:*:*:*:*:*
atastypixelelegant_grunge0.3cpe:2.3:a:atastypixel:elegant_grunge:0.3:*:*:*:*:*:*:*
atastypixelelegant_grunge0.4.1cpe:2.3:a:atastypixel:elegant_grunge:0.4.1:*:*:*:*:*:*:*
atastypixelelegant_grunge0.4.2cpe:2.3:a:atastypixel:elegant_grunge:0.4.2:*:*:*:*:*:*:*
atastypixelelegant_grunge0.4.3cpe:2.3:a:atastypixel:elegant_grunge:0.4.3:*:*:*:*:*:*:*
atastypixelelegant_grunge0.4.4cpe:2.3:a:atastypixel:elegant_grunge:0.4.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

54.4%