CVE-2011-3862

2011-09-2810:55:04

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.

Affected configurations

Nvd

Node

adazingmorning_coffeeRange≤3.5

adazingmorning_coffeeMatch2.7

adazingmorning_coffeeMatch2.8

adazingmorning_coffeeMatch2.9

adazingmorning_coffeeMatch3.0

adazingmorning_coffeeMatch3.1

adazingmorning_coffeeMatch3.2

adazingmorning_coffeeMatch3.4

AND

wordpresswordpress

VendorProductVersionCPE
adazingmorning_coffee*cpe:2.3:a:adazing:morning_coffee:*:*:*:*:*:*:*:*
adazingmorning_coffee2.7cpe:2.3:a:adazing:morning_coffee:2.7:*:*:*:*:*:*:*
adazingmorning_coffee2.8cpe:2.3:a:adazing:morning_coffee:2.8:*:*:*:*:*:*:*
adazingmorning_coffee2.9cpe:2.3:a:adazing:morning_coffee:2.9:*:*:*:*:*:*:*
adazingmorning_coffee3.0cpe:2.3:a:adazing:morning_coffee:3.0:*:*:*:*:*:*:*
adazingmorning_coffee3.1cpe:2.3:a:adazing:morning_coffee:3.1:*:*:*:*:*:*:*
adazingmorning_coffee3.2cpe:2.3:a:adazing:morning_coffee:3.2:*:*:*:*:*:*:*
adazingmorning_coffee3.4cpe:2.3:a:adazing:morning_coffee:3.4:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adazing	morning_coffee	*	cpe:2.3:a:adazing:morning_coffee::::::::
adazing	morning_coffee	2.7	cpe:2.3:a:adazing:morning_coffee:2.7:::::::*
adazing	morning_coffee	2.8	cpe:2.3:a:adazing:morning_coffee:2.8:::::::*
adazing	morning_coffee	2.9	cpe:2.3:a:adazing:morning_coffee:2.9:::::::*
adazing	morning_coffee	3.0	cpe:2.3:a:adazing:morning_coffee:3.0:::::::*
adazing	morning_coffee	3.1	cpe:2.3:a:adazing:morning_coffee:3.1:::::::*
adazing	morning_coffee	3.2	cpe:2.3:a:adazing:morning_coffee:3.2:::::::*
adazing	morning_coffee	3.4	cpe:2.3:a:adazing:morning_coffee:3.4:::::::*
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::