CVE-2011-3841

2011-12-2711:55:07

CWE-79

web.nvd.nist.gov

cve-2011-3841

cross-site scripting

xss

wp symposium plugin

uploadify

get_profile_avatar.php

remote code injection

nvd

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.4%

CPENameOperatorVersion
wpsymposiumpro:wp_symposiumwpsymposiumpro wp symposiumlt11.12.08

CPE	Name	Operator	Version
wpsymposiumpro:wp_symposium	wpsymposiumpro wp symposium	lt	11.12.08

References

secunia.com/advisories/47243

secunia.com/secunia_research/2011-82/

www.securityfocus.com/bid/51017

www.wpsymposium.com/2011/12/v11-12-08/

exchange.xforce.ibmcloud.com/vulnerabilities/71748