Lucene search

K
cveMitreCVE-2011-4568
HistoryNov 29, 2011 - 11:55 a.m.

CVE-2011-4568

2011-11-2911:55:05
CWE-79
mitre
web.nvd.nist.gov
19
cve-2011-4568
cross-site scripting
xss
vulnerability
flowplayer plugin
wordpress
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

60.2%

Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI.

Affected configurations

Nvd
Node
foliovisionfv_wordpress_flowplayer_pluginRange1.12.11
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.12
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.13
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.14
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.15
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.16
OR
foliovisionfv_wordpress_flowplayer_pluginMatch0.9.18
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.1
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.2
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.3
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.4
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.5
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.0.6
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.1.0
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.0
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.1
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.2
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.3
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.4
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.5
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.6
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.7
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.8
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.9
OR
foliovisionfv_wordpress_flowplayer_pluginMatch1.2.10
AND
wordpresswordpress
VendorProductVersionCPE
foliovisionfv_wordpress_flowplayer_plugin*cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:*:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.12cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.12:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.13cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.13:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.14cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.14:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.15cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.15:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.16cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.16:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin0.9.18cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:0.9.18:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin1.0cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:1.0:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin1.0.1cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:1.0.1:*:*:*:*:*:*:*
foliovisionfv_wordpress_flowplayer_plugin1.0.2cpe:2.3:a:foliovision:fv_wordpress_flowplayer_plugin:1.0.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 271

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

High

EPSS

0.002

Percentile

60.2%

Related for CVE-2011-4568